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Abstract 



In a distributed algorithm, multiple processes, or agents, work toward a common 
goal. More often than not, the actions of some agents are dependent on the previous 
execution (if not also on the outcome) of the actions of other agents. The resulting 
interdependencies between the timings of the actions of the various agents give rise 
to the study of methods for timely coordination of these actions. 

In this work, we formulate and mathematically analyze a novel multi-agent coor- 
dination problem, which we call "Timely- Coordinated Response" , and in which the 
time difference between each pair of actions may be constrained by upper and/or 
lower bounds. This problem generalizes some classic coordination problems formu- 
lated and studied by Halpern and Moses, and some coordination problems recently 
formulated and studied by Ben-Zvi and Moses. 

We optimally solve (i.e. provide an optimal protocol for solving) the timely- 
coordinated response problem in two ways: one using a generalization of the fixed- 
point approach of Halpern and Moses, and one using a generalization of the syn- 
chronous causality ( "syncausality" ) approach of Ben-Zvi and Moses. Furthermore, 
we constructively show the equivalence of the solutions yielded by both approaches, 
despite the vast conceptual differences between them. By combining both ap- 
proaches, we derive strengthened versions of known results for some previously- 
defined special cases of this problem. 

Our analysis is conducted under minimal assumptions: we work in a continuous- 
time model with possibly infinitely many agents. The general results we obtain for 
this model reduce to stronger results for discrete-time models with only finitely 
many agents. In order to distill the properties of such models that are significant 
to this reduction, we define several novel classes of naturally-occurring models, all 
generalizing discrete-time models with finitely many agents, which in a sense sepa- 
rate the different results. We investigate the timely-coordinated response problem 
in these models, and present both a more practical optimal solution for the problem, 
as well as a surprisingly simple condition for solvability thereof, for these models. 

To conclude this work, we show how our results for the timely-coordinated re- 
sponse problem generalize the results known for previously-studied special cases of 
this problem, and present some open questions and further research directions. 
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Chapter 1 
Introduction 



In a distributed algorithm, multiple processes, or agents, work toward a common 
goal. More often than not, the actions of some agents are dependent on the previous 
execution (if not on the outcome) of the actions of other agents. This introduces 
interdependencies between the timing of the actions of the various agents. 

1.1 An Informal Example 

We begin with a simple example that illustrates how the coordination problem 
underlying this work arises as a natural, albeit nontrivial, continuation of previously 
studied problems. 

Example 1.1. Consider ACME, an IT company providing on-line storage services^ 
When ACME's on-line storage service is founded, its user base is relatively small, 
and one server fulfills all of the requirements of this service. To be on the safe side, 
though, ACME operates a backup server. Being fairly confident in the stability of its 
main server, ACME does not impose any freshness constraints on the backup server, 
other than that the backup server must never be ahead of the main server, in order 
to avoid even the slightest potential of a data change being reflected solely in the 
backup server. Thus, we may concisely capture the only timing constraint ACME 
imposes on its servers: If a user changes her data, then eventually the main server 

* Some readers may be acquainted with other products provided by ACME, such as high- 
tech warfare gear used by |Wile E. Coyote] in his endless quest to capture the Road RunnerJ or 
be acquainted with the ACME detective agency on the hunt for V.I.L.E. ringleader and former 
ACME agent Carmen Sandiego As both these venues have become less lucrative in recent years, 
ACME decided to follow the trend and go into IT. 
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reflects this change, and eventually, at some later time, the backup server reflects 
it as well. A generalization of the problem underlying such a scenario was studied 
by Lamport TTT^ in an asynchronous model. Recently, Ben Zvi and Moses® [7|/ 
extended this study to synchronous models as well, dubbing the generalized problem 
"ordered response". 

We return to ACME's story. After a while, the user base of the company's 
storage service grows and moreover, many users use it more heavily than before, as 
they have grown both accustomed to it, and confident of its abilities and stability. 
Eventually, a single-server solution becomes inadequate for this service, and ACME 
turns its backup server into a second live server. Optimally, ACME would like to 
impose the following timing constraint on its servers: If a user changes her data, 
then eventually both servers reflect this change, and they do so simultaneously. 
A generalization of the problem underlying such a scenario has been extensively 
studiedl21\ 170]/ under the name "firing squad". In particular, it was studied both by 
Ben-Zvi and Moses® 0/, who dub it "simultaneous response" , and by Halpern 
and Mosesfm [77] /. who call it "perfect coordination" . Unfortunately for ACME, 
though, it is shown in [L^ that this problem is unsolvable under realistic conditions. 

Having read flJ^ , ACME decides to go for what its engineers perceive as "the 
next best thing" , replacing the requirement for simultaneous reflection of a change in 
both servers to "almost simultaneous" reflection. Formally, they demand that if any 
server reflects a change at any time, then the other server reflects this change no 
later than 100 milliseconds thereafter. The problem underlying such a scenario no 
longer falls within the scope of the study of Ben-Zvi and Moses® El IBjj, although 
a generalization thereof was studied by Halpern and Moses [T4\ [77]/ under the name 
"z- coordination" . 

Naturally, as long as this "near simultaneity" constraint (or, in the preceding 
scenarios, the relevant timing constraint introduced there) is met, ACME wish for 
both servers to reflect each user action as close to the time of its occurrence as 
possible^ 

Shortly after the switch to two live servers, an email reaches ACME's headquar- 
ters. ACME's on-line gaming subsidiary, which uses ACME's on-line storage in- 
frastructure to store the state of their on-line multi-player games, complains that the 
slow response time of ACME's servers, coupled with a 100-millisecond lag between 

* We later phrase both the worst-case response time in each of the above scenarios, as well as 
a necessary and sufficient condition for the sheer solvability of this problem, as functions of the 
topology of ACME's network, and of the worst-case communication lag times in it. 
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these servers, renders its multi-player games unplayable. ACME engineers convene 
for an emergency meeting, and propose the following plan: as most of ACME's 
gaming customers are located in the same vicinity (ACME's gaming platform is 
very popular in Israel), from which traffic to ACME's server #2 is particularly fast 
(server #2 resides in Israel, while server #1 resides in the U.S.A.), they can simply 
route all the gaming traffic to server #2, effectively eliminating the 100-millisecond 
lag the gaming subsidiary is complaining about. Unfortunately, this does not solve 
the other cause of this complaint: the slow response time of ACME's servers. (The 
performance price of ACME's new algorithm, which coordinates a maximum fresh- 
ness lag of 100 milliseconds between the servers, is a slower response time of both 
servers than the one achieved in the old single-live-server algorithm.) One of the 
engineers raises the following question: perhaps they can achieve a faster response 
time for server #2 if the timing constraint is revised to be asymmetric: server #2 
must update no later than 100 milliseconds after server #1, however server #1 may 
update as late as 300 milliseconds after server #2. The problem underlying such a 
scenario falls out of the scope both of the studies of Ben-Zvi and Mosesf^ [7|, 
and the studies of Halpern and Moses fT^j and their extension by Fagin et al. \Tl\ 
Section 11.6]. 

The multi-agent coordination problem that we present and analyze in this thesis 
generalizes, among others, the problems arising in the above example. In partic- 
ular, the problem that we present generalizes the last problem arising from this 
example, by allowing to arbitrarily bound the time difference between each pair of 
actions both from above and from below. This generalizes the study of Halpern 
and Moses[H] (and of Fagin et al.[ll[ Section 11.6]) by allowing different bounds to 
be specified for different pairs of actions, and generalizes the study of Ben-Zvi and 
Moses [61 [7J |8] by allowing the specification of an upper and a lower bound that 
do not coincide, on the time difference between a pair of actions. 

1.2 Overview 

In this work, we present and mathematically analyze a novel multi-agent coordi- 
nation problem, which we call "timely-coordinated response" . In this coordination 
problem, which we define and analyze in a synchronous model, a set of agents are 
to perform local actions, and the time difference between each pair of actions may 
be constrained by an upper and/or a lower bound (or neither), which are parame- 
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ters given as part of the problem description. Following the studies of Halpern and 
MosesjH], Fagin et al.[TT]. and Ben-Zvi and MosesjHl EJ [7J E], which we generalize, 
most of this work revolves around the interaction between time and coordination. 

After presenting the timely-coordinated response problem in Chapter |4j we per- 
form, in Chapter [5j a graph-theoretical analysis of the set of constraining parameters 
(upper and lower bounds on the time difference, for each pair of actions) that define 
this problem. This analysis leads to a definition of a canonical representative for 
each class of constraint-sets that define the same problem, and to a characterisa- 
tion for solvability of the timely-coordinated response problem under what may be 
regarded as ideal conditions. 

In the following two chapters, we optimally solve the timely-coordinated re- 
sponse problem in two ways, each generalizing one of the approaches previously 
used to analyze some special cases thereof: In Chapter [6j we survey, and the gener- 
alize, the "syncausality" approach of Ben-Zvi and Moses, which may be viewed as 
more of a concrete "nuts and bolts" approach. In this chapter, which is combinato- 
rial in character, we study the timely-coordinated response problem in the possible 
presence of guarantees on message delivery times between agents. (In Chapter [9j 
we present a result showing the impossibility of timely coordination using mutual 
constraints in the absence of such bounds.) In Chapter [7j we survey, and then 
generalize, the "fixed-point" approach of Halpern and Moses, which was later stud- 
ied by Fagin et al. as well. This approach, whose origins are traceable to temporal 
logic, may be conversely viewed as more of an abstract "higher level" approach. The 
main result presented in each of these two chapters is a description of an optimal 
protocol/algorithm for solving the timely-coordinated response problem. Following 
these analyses, we constructively show, in Chapter [8j that, despite the significant 
conceptual and technical differences between these two approaches, they both yield 
equivalent solutions for the timely-coordinated response problem. 

The above-surveyed analysis is conducted under minimal assumptions: it ap- 
plies to a continuous-time model, which may contain infinitely many agents. The 
general results obtained using this analysis reduce to stronger results when the 
model in question is a discrete-time one, and contains only finitely many agents. 
In Chapter |9j we define several novel classes of naturally-occurring models, all of 
which generalize discrete-time models that contain finitely many agents. These 
classes of models, in a sense, separate the specialized discrete-time finite-agent re- 
sults from the generic continuous-time infinite-agent results. We investigate the 
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timely-coordinated response problem in these models, and derive, for these models, 
both a more practical description of the optimal solution for this problem, as well 
as a surprisingly simple condition for solvability thereof, in terms of the available 
network communication channels and the worst-case delivery times therein. We 
conclude this chapter by combining both approaches to derive a strengthened ver- 
sion of a known impossibility result for some previously-defined special cases of the 
timely-coordinated response problem. 

Following the above analysis, we show, in Chapter [TOJ how the results obtained 
in the previous chapters reduce to generalizations of the known best results for 
previously-studied special cases of the timely-coordinated response problem. 



Finally, in Chapter [TTJ we qualitatively discuss some of our results, and present 
some open questions and some future research directions in which the results of this 
work may prove to be useful. 

The main contributions of this work are: 

1. Identifying, defining and analyzing the timely-coordinated response problem. 

2. Applying both above-described approaches to analyze this problem, thereby 
unifying, generalizing and strengthening results previously achieved using 
these approaches. 

3. Deriving generic results for continuous-time models, as well as specialized 
results for discrete-time models, and defining "intermediate" model classes 
which, in a sense, separate the continuous-time results from the discrete-time 
results. 

Underlying this work are three different currents. While these are intercon- 
nected, each of these may stand alone in its own right, and may be of interest to a 
different audience: 

• Our graph-theoretic analysis from Chapter [5] may be of most interest to com- 
binatorists. 

• Our generalization of the fixed-point approach and its results may be of most 
interest to logicians and game theorists. 

• Our generalization of the syncausality approach and its results may be of most 
interest to computer scientists and engineers. 



Chapter 2 
Notation 



Throughout this work, we use the following notation: 

• Vn 6 N : [n] = {l,...,n}. 

• We denote the non-negative reals by M> = {t G K. | t > 0}. 

• Given a set /, we denote the set of ordered pairs of distinct elements of / by 

P±{(i,j)el 2 \ i^j}. 

• Given a set A, n G N and an n-tuple a = (a m )^ =1 G A n , we denote the n-tuple 
containing the elements of a in reverse order by d rev = (a n _ m+ i)^ =1 . 

• Given a directed graph G = (V, E), we denote the set of paths in G by 

V(G) ±{p= ( Pm ) n m=1 G V n I n G N & Vm G [n - 1] : (p m ,Pm + i) G £}. 

• Given a weighted directed graph G = (V,E, w), we denote the length of a 
pathp = (p m )^ =1 GP(G)by 

n-l 
m=l 

Furthermore, we denote the distance function between vertices of G by 

5 G : V 2 ->■ [-(X), oo] 

(i, j) H- inf{L G (p) | p = (p m )^ = i G & Pl = i & p n = j}. 
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Chapter 3 

A Discrete-Time Model 



We model a set of agents that communicate with each other solely via message 
passing. Each agent follows a predetermined protocol, which is common knowledge 
to all agents. In the following chapters, we concern ourselves with the task of 
devising such protocols with the goal of analyzing a coordination problem that we 
define in Chapter |4j 

To avoid over-burdening the reader with cumbersome details, the model pre- 
sented in this chapter is a discrete-time model, conceptually based on [XI], which 
may be assumed while reading this work. It should be noted, though, that the results 
presented throughout this work hold verbatim also for a more intricate continuous- 
time model, which we present in Appendix |A| In Chapter [9j we consider several 
natural properties of practical continuous-time models, some of which always hold 
for the model presented in this chapter, and prove results for models with these 
properties. 

3.1 Context Parameters 

Intuitively, a context describes the environment in which the agents operate. In 
this discrete-time model, we formally denote a context by a tuple 7 = (Q 1 = 

(I 7 , JV 7 , 6 7 ), (Si) ieLy , E y , (ie)ee£ 7 )> where: 

1. £? 7 is a weighted directed graph with positive, integral or infinite, weights. The 
vertices I 7 of £? 7 model the agents. We say that an agent j G I 7 neighbours an 
agent i E I \ {j} if G N y . If this is a case, then % may, as will be defined 
in greater precision below, send messages to j, which are guaranteed to arrive 
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no later than b 1 (i,j) after being sent. 

2. For each agent i G I 7 , Si is a set of legal states for i. We assume that Si is of 
large enough cardinality to accommodate all our needs. 

3. E 1 is a set of "possible external inputs". We think of external inputs as 
non-deterministic events, the occurrence of which may not be anticipated in 
advance by any agent. 

4. Each external input e G E 1 is associated with a single agent G I 7 , which 
observes this input when it occurs. 

Additionally, we define the set of times as T = N U {0}. As noted above, in 
Appendix [A] we give an alternative model description, in which time is continuous. 

3.2 Events and the Environment 

At each possible time t G T, zero or more events may take place. Intuitively, an 
event is an occurrence that is observed by a single agent. An event may be of one 
of the following types: 

1. An external input event e G E^. (Observed by ig-) 

2. A message delivery event (m,t', of a message m, sent by i at time t', to 
j, s.t. G iV 7 . (Observed by j.) 

We define the "state of the environment" at any given time as the set of events 
that take place at that time. We denote the set of all possible states of the envi- 
ronment by S e = 2 E ~* x 2- MxTx7V t, where Ai is a set of all possible messages. 

3.3 States, Actions and Protocols 

The problem that we define in the next chapter deals with the coordination of the 
responses of different agents to an external input. At any time t 6 T, each agent 
% G I 7 performs the following, in a manner that is based on its state, as well as on 
any events observed by it at t: 

1. Sets a new state for itself (which may be identical to its old state). 
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2. Sends any number of messages, each with possibly different content, and to a 
possibly different neighbouring agent j G I 7 (i.e. j G I 7 s.t. G iV 7 ). 

3. Possibly "responds". This is the action that we aim to coordinate^ 

We thus define the set of possible actions that may be taken by i at t as A; L = 
Si x 2 Mx ^ eI ^ % ^ eN ^ x {false, true}. (Each element in A{ consists of a new state 
for i at t, a set of messages to be sent by % at t, and a boolean value that indicates 
whether % responds at t.) 

A "local protocol" for an agent i G I 7 consists of a set of possible initial states 
for i, together with an "action" function, receiving as input a state of i just before 
a certain time t G T and any events observed by i at t, and outputting the actions 
to be performed by i at tM Formally, a local protocol for i is a pair (St, Pi), s.t. 
5j C Sj and Pi : Si x 2^ eig= ^ x 2- A/!x/ — >■ A*. In certain cases, we may wish to 
allow the actions of i at t to also depend on t as well. In such cases, we say 
that the model is a "shared-clock model" , and the actions function takes the form 
Pi : SiX 2^=*} x 2 MxI x T A. 

A "joint protocol" ("protocol", for short) is a collection of local protocols, one 
for each i G I 7 . We denote the set of all protocols of 7 by P 7 . 

An important set of protocols is the set of "full-information" protocols [20], in 
which the state of each agent i G I 7 at any time i 6 T uniquely determines the 
full details of every event observed by % up until, and including, t. Furthermore, 
at every t G T, i sends to every neighbouring agent a message including the full 
current state of % at t, and in a shared-clock model — also the current time. 



3.4 Runs 

For the duration of this section, fix a protocol P = ((Si, Pi))iei G P 7 . A "run" 
of P in 7 is, intuitively, a "possible infinite history" of P executed in 7, in which 
the behaviour of all agents is governed by P. Formally, a run of P is a function 
r : T — > S e x X ig/ Si assigning, for each time, a state for each agent, and a state 
for the environment, while satisfying the following properties]^] 

* For simplicity, we define only one type of response per agent. Our models, and our results 
in this work, may be readily generalized to allow a set of possible responses for each agent. 

§ We restrict ourselves to deterministic protocols solely for ease of exposition. 

™ While a run is customarily defined in an inductive fashion, we define it here without induction 
in order to minimize the differences between the definitions of our discrete- and continuous-time 
models. 
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• Agent state consistency with local protocol: Let i £ I and t G T, then Ti(t) 
must equal the first part of the output of Pi when applied to ri(t — 1) (or to 
some Si G Si, if t — 0) and to the events observed by i at t (which depend 
only on r e (t)). (The other parts of this output of Pi determine the actions of 
i at t.) 



• Environment state properties: 

1. Each external input e G E 1 may occur no more than once during a run. 

2. Bounded message delivery: If a message is sent at any t G T by i G I 7 
to j G I 7 (where (i, j) G iV 7 ), then it must be delivered exactly once, at 
some time t' G T, s.t. t < t' < t + 5 7 (i, j). Ut'<t + 5 7 (i, j), then we say 
that this message is delivered early. Only messages that are sent during 
a run may be delivered during it. 



We call an event "non-deterministic" (ND for short) if it is either an external 
input event, or an early delivery. (Intuitively, we may think of ND events as events 
that cannot be foreseen by any agent before they occur, and thus occur, in a sense, 
at the whim of the environment.) It should be noted that this definition is context- 
dependent, as it depends on 6 7 . 

We denote the set of all possible runs of P in 7 by P 7 (P). We denote the set of 
all runs of all protocols by in 7 by !Z y = Up e p 7 i? 7 (P). 

It should be noted that two full-information protocols (as defined in the previous 
section) P, P' G P 7 may only differ in their response logic, and therefore there is 
a natural isomorphism between R-y(P) and i? 7 (P'), which preserves the set of ND 
events along with their occurrence times. 

As was essentially shown in [20], given a protocol P G P 7 , there exists a full- 
information protocol P' G P 7 , s.t. there is a natural monomorphism from R-y(P) into 
i? 7 (P'), which preserves both the set of ND events (and their occurrence times), 
and all responses (and response times). This ability of a full-information proto- 
col to simulate any other protocol implies, for our purposes, that if there exists 
some protocol that solves a certain coordination problem, then there also exists 
a full-information protocol that solves this problem. This justifies restricting to 
full-information protocols when analyzing solvability, which will sometimes prove 



convenient. (See, e.g. Definition 4.7 and Corollary 9.7 
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3.5 Notation 

Given a context 7 = {Q 1 = (I 7 , 7V 7 ,& 7 ), (^j)^^, Ey, (^e)eg_B 7 )> we introduce the fol- 
lowing notation: 

• Given a run r G 7£ 7 , we denote the set of all events in r by E(r). As we wish 
to regard each event as unique, and as we defined events above not to contain 
their occurrence time, we technically define E(r) as a set of event-time pairs 
(e, t e ), where each event is paired with its occurrence time. 

• Given a run r 6 % 7 , we denote the set of all the ND events in r by ND^(r) C 
E{r). 

• As mentioned above, we analyze the coordination of the responses of different 
agents to a given external input. Thus, given a protocol P G P 7 and an 
external input e G E 7 , we define the set of "e-triggered" runs of P as 

R;(P) 4 {r G i? 7 (P) I e G M) 7 (r)}. 

where by slight abuse of notation, we use e G ND^(r) as a shorthand for 
3t G T : (e, t) G ND 7 (r). We follow this convention occasionally, when no 
confusion can arise. 



Chapter 4 

Timely-Coordinated Response 



In this chapter, we define the main coordinated response problem underlying this 
work, which we call "timely-coordinated response", and analyze some of its basic 
properties. 



4.1 Coordinated Response Problems 

Before defining the timely-coordinated response problem, we first define a broader, 
much simpler, coordinated response problem. (In a sense, it is the simplest coor- 
dinated response problem.) This simpler problem will serve as a building block for 
the timely-coordinated response problem. In addition, the short discussion of this 
simpler problem will provide an introduction to a novel theory of coordinated re- 
sponse problems^ which we attempt to formalize throughout this work. During this 
discussion, we introduce some definitions and concepts, which we later reuse while 
discussing various coordinated response problems throughout this work. While 
philosophically a problem may be thought of as a specification, or as a collection 
of constraints, we formally associate a coordinated response problem with the set 
of protocols solving it, effectively treating two problems that share the same set of 
solutions as identical. 

Definition 4.1 (Eventual Response). Given a context 7, an external input ee£ 7 
and a set of agents I C I 7; we define the "eventual response" problem ER 7 (e,I) C 

* While Ben-Zvi and Moses[51 [SJ [TJ [5] define quite a few problems to which they refer as 
"response problems" (all of which we survey in Chapters [6] and 10 and from which we draw 



motivation), they do not give a formal definition for a response problem, or for a coordinated 
response problem. 
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P 7 as the set of all protocols P satisfying: 

• In each r G R^(P), each i E I responds exactly once. In this case, we denote, 
for each % G I, the response time of i in r by t r (i). (Hence, t r is a function 
from I to T.) 

• In each r G R-y(P) \ Rt{P), neither of the agents in I responds. In this case, 
we define t r = oo. 

Thus, for every r G i? 7 (P), we have defined a function t r : I — ^ T U {oo}. 

Remark 4.2. Let P G ER 1 (e,I) and let r G R^(P). While each i G / responds in 
r, none of them do so before e occurs. 



Intuitively, Remark 4.2 holds because, as we noted when describing our model(s), 
the non-deterministic nature of e implies that no agent may possibly infer that a run 
is triggered before e occurs in that run. (Indeed, as far as any agent is concerned, 
as long as e has not occurred yet, it may be the case that e will never occur during 
this runQ Formally, this may be readily proven using machinery that we have 



not introduced yet. (See, e.g. the beginning of the proof of Theorem 6.34 for a 
proof of a stronger statement using the tools of Chapter [6j and Corollary 7.30 for a 
conceptually-similar proof using the tools of Chapter [7j) 

Example 4.3. In the popular TV talent show "Got Talent", a panel of judges (that 
we denote by I) judge various amateur performances, with themes ranging from 
music, through magic, to some very obscure themes that are better left undescribed. 
Once a contestant starts performing on stage, each judge may press an "X" button to 
signal her desire for this performance to end. (We denote this action as a response 
by the judge.) The performance continues until it has run its course, or until all 
judges have pressed their respective "X" buttons. 

As the "mean" judges sometimes implicitly compete between themselves regarding 
who presses his "X" button first, let us consider a hypothetical "enhancement" to the 
show, in which a bucket of water is poured over the head of any judge who presses 
his "X" button before a performance starts. 

Consider a hypothetical repetitive (and thus, potentially never-ending) perfor- 
mance in this TV show. (This indeed sometimes seems to be the case, especially 



* In the continuous-time model presented in Appendix [XJ this stems from the "no foresight" 
property. 
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for very bad performances, which are abundant in this show.) In order to guarantee 
that this performance does not continue forever, the show producers must make sure 
that each judge presses her U X" button at some time during the performance (but 
not before the performance starts, as she wishes to remain dry). The order of the 
"X" presses of the different judges is insignificant, as long as it is guaranteed that 
each judge eventually presses her U X" button. As the beginning of the performance 
depends on the rambling of the comedian serving as show host (which may possibly 
also never end), it is impossible for the judges to predict before it actually occurs, 
so we may regard it as a non- deterministic external input, which we denote as e. 



Remark 4.4. In Definition 4-l\ and hereafter, we assume, for simplicity, that each 



agent is associated with no more than one response, as we did when defining our 
model. (While it may seem a bit silly to assume otherwise in the eventual response 
problem, it may make sense to do so for more intricate coordinated response prob- 
lems defined below.) Nonetheless, all the results we derive throughout this work 
regarding any response problem are easily adaptable to the case in which more than 
one response type is available per agent, and in which I is a set of agent-response 
pairs, rather than merely agents. (In this way, some agents may be associated with 
more than one of the responses being coordinated.) Indeed, all our results apply ver- 
batim to this generalized case as well, if we allow ourselves, for each agent-response 
pair i = (i, a) G /, to slightly abuse notation by writing i to refer to % as well. 

While studying a coordinated response problem, we are usually interested in two 
questions: 

• Solvability: Under which conditions is it solvable? and if so, 

• Optimality: What is the "fastest" way to solve it? 

Before answering these questions regarding the eventual response problem, we 
first define them (and define coordinated response problems) precisely. 

Definition 4.5 (Coordinated Response). Let 7 be a context, let e G E 1 and let I C 

I 7 . We call a problem a "coordinated response" problem to e by I, if the set of pro- 
tocols solving it is a subset of (the set of protocols solving) ER 7 (e,I). As before, we 
formally identify a coordinated response problem with the set of protocols solving it. 



We usually define coordinated response problems by restrictions on the response 
times t r in all triggered runs r (e.g. "J must respond together in each triggered run", 
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"J must respond in a given order in each triggered run", etc.). In order to ease the 
reading of the following two definitions, one may consider, as an example, the case 
in which CP = ER^(e, I) for some e G E 1 and / C I 7 . 

Definition 4.6 (Solvability). Let 7 be a context and let CP C P 7 be (the set of 
protocols solving) a coordinated response problem. We say that CP is "solvable" if 
CP 7^ 0. Otherwise, we say that it is "unsolvable" . 

Definition 4.7 (Optimal Response Logic). Lei 7 be a context and let CP C P 7 be a 

coordinated response problem. Assume that CP is solvable and let P G CP. Assume 
w.l.o.g. that P is a full-information protocol. Let P' be the protocol obtained from P 
by modifying the response logic of each i G / in some way. As P and P' only differ 
by their response logic, there is a natural isomorphism between R^(P) and Rj(P') 
that preserves the set of ND events. 

We say that the response logic of P' is an "optimal response logic" for solving 
CP if the following are satisfied: 

1. P' G CP. 

2. If r G R~/{P) andr' G R^(P') are two runs of the respective protocols matched 
under the above isomorphism, then t r > < t r . 

We may now answer the above questions of solvability and optimality, with 
regard to the eventual response problem. 

Remark 4.8. Let 7 be a context, let e G E 7 and let I C I T . The following may be 
easily verified: 

• ERry(e,I) is solvable iff for every i G / there exists p = (p m )^ =1 G V(G) s.t. 
Pi = ie and p n = i. 

• An optimal response logic for solving ER y (e,I) is, for every i G /, "re- 
spond as soon as i receives information guaranteeing that e occurred.'^ (This 
seemingly-vague condition has a very precise meaning in a full-information 
protocol, as each message sent in such a protocol uniquely determines a list of 
events that are guaranteed to have occurred.) 

• In some runs of certain contexts with infinitely many agents under the continuous-time 
model presented in Appendix [SJ the set of times at which i has information guaranteeing that 
e has occurred does not attain its infimum value. It is straightforward to show that for such 
pathological cases, no optimal response logic exists. Similar observations hold for all other optimal 
response logics presented in this work as well. 
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It should be noted that for many coordinated response problems, it is fairly 
straightforward to deduce a solvability criterion (phrased as a requirement on the 
topology and weights of £? 7 ) from an optimal response logic. In the above example, 
the optimal response logic demands, for % to respond in each triggered run, that 
in each such run % receives information guaranteeing that e occurred. Thus, a 
necessary and sufficient condition for solvability is that in each triggered run, each 
agent is guaranteed to receive information to this effect. This is exactly equivalent 
to the solvability criterion above. For this reason, for many coordinated response 
problems, we will be primarily interested in an optimal response logic. 



Due to the first part of Remark 4.8, we assume hereafter, whenever discussing a 
coordinated response problem of a set of agents I C I 7 to an external input e G E^, 
that there exist paths in £/ 7 from ig to every agent i G I. 



4.2 Defining Timely-Coordinated Response 

We define the timely-coordinated response problem as a response problem in which 
maximum and minimum values for the differences between the response times of 
each pair of agents are provided. In a discrete-time model, such constraints may 
be defined by any integral, or infinite, value. In a continuous-time model, such 
constraints may be defined by any real, or infinite, value. In order to formally 
present the timely-coordinated response problem, we first define the set of such 
possible constraining values. 

Definition 4.9. We define A = (T - T) U {-oo, oo}. 

Remark 4.10. If T = N U {0} ; then A = Z U {-oo,oo}. If T = R> , then 
A = [— oo, oo]. 

We now turn to define the constraints imposed on response times in triggered 
runs in the timely-coordinated response problem. Recall that given a set /, we 
denote the set of ordered pairs of distinct elements of / by J 2 . 

Definition 4.11 (Implementation). We call a pair (1 , 5) an "implementation-spec", 
if I is a set and if 5 is a function 5 : I 2 — >■ A. Given an implementation-spec (I, 5), 
we call a function t : / — > T an "implementation" of 5, if t(j) < t(i) + S(i,j) for 
every G I 2 . We denote the set of all implementations of 5 byT(5). IfT{8) ^ 0, 
we say that 5 is "implementable" . Otherwise, we say that it is "unimplementable" . 
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Remark 4.12. Let {1,6) be an implementation- spec. By Definition 4-H 



• Obviously, 8 is unimplementable unless 8 > —oo. Nonetheless, we still allow 
8 to take the value of — oo for some or all agent pairs, for technical reasons 
that may become apparent when we define a canonical form for 8 in the next 
chapter. 

• Every t G T(S) satisfies —8(j,i) < t(j) — t(i) < 8{i,j) for every (i,j) G I 2 . 

• Let t : I — > T. If t G T(5), then t + c G T(5) as well, for every c G T. We say 
that two implementations of 8 are "similar" if they differ by a translation. 

• T is monotone: Let 8' : I 2 ->• A. If 8 < 8', then T(8) C T(5'). 

At last, we are ready to define the timely-coordinated response problem. 

Definition 4.13 (Timely-Coordinated Response). We call a quadruplet ( / y,e,I,5) 
a u TCR-spec", if 7 is a context, e G E 1 is an external input, and {1,6) is an 
implementation- spec s.t. I C I 7 . Given a TCR-spec (j,e,I,8), we define the 
"timely- coordinated response" problem TCi? 7 (e, I, 5) C ER 1 (e,I) as the set of all 
eventual-response protocols P for which t T G T{8) for every triggered run r G R^(P). 



Remark 4.14. Let (7, e, /, 5) be a TCR-spec. By Definition 4-13: 

• VJCJ: TCR 1 (e,I,8)Q TCRj(e, J, 5\fi). 

• Let 5' : P -»■ A IfT(6) C T(5'), then TCR 7 (e,I,8) C TCR 7 (e, I, 8'}. 

Example 4.15. Returning to the "Got Talent" show from Example 4-3\ Assume 
that the panel of judges consists of two judges: Alice and Bob. The producers wish to 
create, among the viewers, the general impression that Bob is a "meaner" judge than 
Alice, but only by a subtle difference. One way to achieve this may be to ensure that 
Bob never responds more than 5 seconds after Alice, and that Alice never responds 
more than 40 seconds after Bob. Coordinating this may not be very simple if, for 
example, the judges are seated in a way that prevents each judge from knowing when 
the other judge presses the "X" button. (Thus, for example, Alice may have to rely 
on information regarding Bob 's taste, such "Bob always presses his "X" button no 
more than 10 seconds after someone falls on stage.") This is a simple instance of 
the timely- coordinated response problem. 

The rest of this work, as noted above, is dedicated to the analysis of the timely- 
coordinated response problem. 



Chapter 5 

The Constraining Function 



Before we turn to analyze the coordination required in order to solve the timely- 
coordinated response problem, we first note that for an unimplementable 5, the 
situation is hopeless to begin with, as the timely-coordinated response problem is 
is unsolvable regardless of the context 7 in which it is defined. In this chapter, we 
embark on a graph-theoretic discussion with the aim of phrasing a necessary and 
sufficient condition for implementability of a constraining function 5. First, though, 
we make the above comment regarding "hopelessness" precise: 

Claim 5.1. Let (7, e, I, 8) be a TCR-spec. 

1. TCR 1 (e, /, 5) is unsolvable if 5 is unimplementable. 



2. If TCi? 7 (e, /, O^jis solvable, then the converse holds as well, i.e. TCRj(e, I, 5) 
is solvable if 5 is implementable. Furthermore, for any implementation t of 
5, there exists a solving protocol P G TCi? 7 (e, /, 5), for which the map from 
agents to response times in every one of its triggered runs is similar to t. 



Remark 5.2. Regarding Claim 5.1 



Solvability of TCi? 7 (e, 1,0) is equivalent to the ability to coordinate a simul- 
taneous response of all agents in I in every e-triggered run. This classic 
problem, known as the "Firing Squad" problem l21\ will repeatedly appear 



in this work. (See, e.g. Theorem 6.12, Corollary 9.7, Theorem 9.10 and The- 
orem 



9.12.) 



* We use here and hereafter as a shortcut for the constant zero constraining function, i.e. 
5 a : I -> A s.t. S ee 0. 
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Corollary 9. ? shows that under certain conditions, the function in the second 



part of Claim 5.1 may be replaced with a variety of other functions. 



Proof of Claim 5.1 , For the first part, assume that TCR 1 {e, /, 5) is solvable. Thus, 
there exists P G TCR 7 (e, 1, 5). Let r G R^(P). By Definition 4.13, t r is an 
implementation of 5, and hence 5 is implementable. 

For the second part, assume that 5 is implementable and let t G T(5). Let 
Po £ TCR~/(e,I,0). Let P be the protocol obtained from P by modifying the 
response logic of each i G 7 to "respond t(z) time units after the time z would 
have responded in P ". (This may require adding some auxiliary variables, which 
consume only a finite amount of memory, to the state of For the continuous- 
time model presented in Appendix [A] this response logic may be implemented using 
timers.) We complete the proof by showing that P G TCR y (e,I,5). As Po and P 
only differ by their response logic, there is a natural isomorphism between P 7 (P ) 
and P 7 (P), which preserves the set of ND events. Let r G P 7 (P), and denote by r 
the run of Po matched to r under this isomorphism. If r G R^(P), then r G i?^(Po), 
and we have t r = t ro + t < oo. Note that as P G TCP 7 (e, 7, 0), we obtain that t ro 
is a constant function — denote its value by t ro . By Remark 



4.12 



an implementation of 5 (which is, by definition, similar to t). If r ^ R^(P), then 
r ^ R^(Pq). In this case, we have t ro = oo, and therefore t r = oo as well. □ 



By the second part of Claim 54^ the study of the implementability of a constrain- 
ing function 5 may also be thought of as the study of solvability of TCi? 7 (e, J, S) in 
contexts 7 in which TCi? 7 (e, /, 0) is solvable. (By both parts of that claim, contexts 
in which TCi? 7 (e, 1,0) is solvable may be thought of as ideal for solvability, in the 
sense that instances of the timely-coordinated response problem that are unsolvable 
therein are unsolvable in any context j^J 

As a first step toward analyzing the implementability of a function, we define 
a canonisation operation on constraining functions, which preserves the set of im- 



* As the set of possible states of i is predefined by 7, it is not technically possible to add 
variables to it. The technical operation that we denote as "adding a variable" to the state of i in 
Po involves utilizing states of i that are not utilized by Po: Let S[ C Si be the set of states of 
i that are utilized in Po (i.e. the union of its set of initial states Si, with the image of the first 
coordinate of PoJ- We choose, as the set of states of i utilized by P, a subset of Si that is in 
one-to-one correspondence with Si x V, where V is the set of possible values of the variable we 
wish to "add" to the state of i. As noted in Chapter |3j we assume that S{ is of large enough 
cardinality to allow for the existence of such a subset thereof. 

§ Ideality for solvability, in this sense, only reveals part of the whole picture, as it disregards 
the question of how fast can the responses be coordinated after an occurrence of e. 
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plementations. The canonical form of a constraining function will aid us in other 
aspects of the analysis of the timely-coordinated response problem as well, due to 



Remark 4.14 In order to define this canonical form, we consider 5 as a weight 
function on the edges of a directed graph on I. 

Definition 5.3. Given an implementation- spec {1,5), we define the weighted di- 
rected graph of 5 as Gs = (I, E$,5\e s ), where E$ = G I 2 \ 5(i,j) ^ oo}. 

Remark 5.4. Let (I, 5) be an implementation- spec. By the above definition: 

1. If I = {i,j}, then every p G V(G$) is either of the form . . .) or of the 

n 

form ■ ■ ■ ), for some n£N. (If \I\ > 2, then V(G$) is much richer.) 

v v ' 

n 

2. VpeV(G s ) : L Gl {p) < oo. 

Definition 5.5 (Canonical Form). Let {1,8) be an implementation- spec. We define 
the "canonical form" of 5 as 5 = 5g s , the distance function of Gs- By slight abuse 
of notation, we allow ourselves to write 5 instead of8\p on some occasions below. 

Remark 5.6. Let (1,6) be an implementation-spec. By the above definition, 5 
satisfies: 



• Vi G / : 5(i,i) G {0, — oo}. (Thus, by Remark 4-12, for implementable 5 we 
obtain 5\{(i : i)\i^i} = 0.) Furthermore, 5(i,i) = — oo iff i is a vertex along a 
negative cycle in G$- 

• Idempotence: 5 = 5. 

• Minimality: 5 < 5. 

• Triangle inequality: Vz, j, k G / : 5(i, k) < 5(i,j) + 5(j, k). 

• Equivalence: T(5) = T(5). (C.: by the triangle inequality for path lengths. 
D: by minimality and by Remark 4. 12 (monotonicity ofT).) 

• Monotonicity: Let 5' : I 2 ->• A. If 5 < 5', then 5 < 5'. 

We are now ready to characterise the implementable functions from I 2 to A. The 
first part of the following lemma performs this task, while its second part shows that 
for every implementable 5, there exists an implementation that is minimal in every 
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coordinate — a result that gives us hope to find an optimal response logic for the 
timely-coordinated response problem for every 8^\ 

Lemma 5.7. Let (1,8) be an implementation- spec. 

1. 5 is implementable iff 8\{i} x i is bounded from below for every i G I. 

2. If 5 is implementable, then i h-> — 'va.f(8\u\ x i) is an implementation thereof, 
which is minimal in each coordinate^ 

Proof. We first prove that if 5 is implementable, then every t G T(8) satisfies 
t(i) > — inf (8\{iy x i)). This implies the first direction ("=^") of the first part, and 
the inequality in the second part. 

Assume that 8 is implementable and let t G T(8) be an implementation thereof. 



By Remark 5.6 (equivalence), t G T(8) as well. Let i G /. By definition of an 



implementation, we obtain 

Vj El\{i}: 8(i,j) > t(j) - t(i) > - t(i) = -t(i). 



By Remark 5.6, 8(i,i) = > — t(i). Thus, we have 5|{j} x / > — t(i). Taking the 
infimum over / of both sides of this inequality completes this part of the proof. 

We now prove that if 8\^ x i is bounded from below for every i 6 /, then the 
function defined in the second part is indeed an implementation of 8. This completes 
the proof of both parts. 



Define t : I — > T by i \- > — mf(8\{ij x j) < oo. By Remark 5.6, 8(i,i) < 0, and 



therefore indeed t > 0. Let (i, j) G I 2 . Let p = (jo m )^ =1 G V(G$) s.t. pi = j. Define 



Po = i. Note that 



inf(% }x/ ) < L Gs ((p m ) n m=Q ) = 8(i,j) + L Gs ((p. 



m)m=l, 



* We do not wish, by any means, to imply that the existence of such a minimal implementation 
implies the existence of such an optimal response logic, nor even that in every run r of a protocol 
endowed with such a response logic, t r is similar to this minimal implementation. We merely note 
that in the hypothetical absence of such a minimal implementation for some implementable S, it 
would have been possible to show that no optimal response logic exists for the timely-coordinated 
response problem based on that S. See also a discussion regarding Remark 6.36 below. 

§ A quick glance at this formulation of the minimal implementation may raise a suspicion 
that perhaps it would have been more natural to define S as the negation (in each coordinate) of 
the definition we have given. While it is indeed possible to define <5 this way, and while doing so 
would have indeed given a more natural definition of the minimal implementation, it would have 
also required us to work with greatest path lengths instead of distances, with a reverse triangle 
inequality and with order-reversing monotonicity, which may somehow seem less natural. 
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By taking the infimum of both sides over all p G V(Gg) s.t. p\ = j, we obtain 
inf(5|{j} x /) < 5(i,j) + inf(5|{j} x j). Thus, we have t(j) < t(i) + 5(i,j), as required. 

□ 



For the case in which / is finite, the first part of Lemma [57f] yields the following, 
more tangible, implementation criterion. 

Corollary 5.8. Let {1,6) be an implementation-spec s.t. \I\ < oo and 5 > — oo. 

5 is implementable iff Gs contains no negative cycles. 

For completeness, we now prove a uniqueness property one may expect from the 
canonical form defined above, showing that the equivalence classes of implementable 
constraining functions, under the equivalence relation Si ~ 82 T(6i) = T(<5 2 ), are 
in one-to-one, order-preserving, correspondence with canonical forms. At the heart 
of the proof of this property lies the following lemma. 

Lemma 5.9. Let (1,6) be an implementation- spec s.t. 5 is implementable, and let 

1,3 el. 

1. If 5(i, j) < oo, then there exists an implementation t G T(S) satisfying 
t(j)-t(i) = 5(i,j). 

2. If 8(1, j) = 00, then for every K G T, there exists an implementation t G T(S) 
satisfying t(j) — t(i) > K . 



Proof. By Lemma 5.7, Vi G / : 3rfj G T : 5|{j} x / > — d%. (For the time being, we 
may choose (—64)^1 to be the infima of the respective restrictions of 5.) We define 
5' : f 2 -)■ A \ {00} by 



S(i,j) S(i,j)< 00 
dj 8(i,j) = 00. 



Vi,jei 2 :5'(i,j)-- 

As 8' < 5, by monotonicity of T it is enough to find an implementation of 5' that 



satisfies the conditions of the lemma. By Remark 5.6 (minimality), it is enough find 
such an implementation for 5'. 

We first show that Vz G / : S'\^y x i > —d*. Let i G J and let p = (jp m )m=i e 
V(Gs>) s.t. pi = i. Set I = \{k G [n — 1] | o~(pk,Pk+i) = oo}\ - the number of 
"new" edges in p, which do not exist in Gs- We show, by induction on I, that 
Lg s ,(P) >~di. 
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Base: If I = 0, then Lg s ,(p) = Lg s (p) > ~~ <k- 

Induction step: Assume I > 1. Let k G [n — 1] be maximal such that (pk,Pk+i) is 
a "new" edge (i.e. = oo). By definition of 8', we have <5'(pfc,pfc+i) = d Pk+1 . 

Thus, by the induction hypothesis, we obtain 

Lg s ,{P) = L Gs X(p m )t=i)+S'(Pk,Pk+i)+LG s ((Pm)m= k +i) > -di+d Pk+1 -d Pk+1 = -di. 

and the proof by induction is complete. In particular, we conclude that 8' > — oo, 
and by definition, also 8' < 8' < oo. 

We claim that t = d% + 8'(i, •) > is an implementation of 8'. Indeed, for every 



(j, k) G I 2 , by Remark 5.6 (triangle inequality), we have 

t(k) = d, + 8% k)<d- t + 8'(t,j) + 6'ti, k) = t(j) + 8'(j, k). 

If 5(i, ]) < oo, we define K = 5(i, J); otherwise, let K £ T be arbitrarily large as 



in the conditions of the lemma. As 5' is implementable, by Remark |5.6 we obtain 
<5'(z, i) = 0. Therefore, 

t(j) - tit) = {di + 8'(i,j)) - (d~ % + 8>(i,i)) = 8'(i,j). 

Thus, if 8'(t,j) > K, then the proof is complete. (For the case in which 8(t, j) < oo, 



we obtain 5'(t, j) < K by Remark 5.6 (monotonicity), since 5' < 5.) 

Otherwise, set d = K — 8'(t,j) > 0, and define d\ = di + d > d i} for every 
i £ I. Therefore, — d\ < —di < <5|{j} x / for every i 6 /. Denote by 5" the function 
constructed from 8 in the same way in which 8' was constructed from it, but using 
the lower bounds (— cQie/ rather than (— di) i£ j. As explained above, in order to 
complete the proof it is enough to show that 8"(i,j) > K. Let p = (p m )^ =1 G 
V(G S ") s.t. pi = 1 and p n = j. If VA; G [n - 1] : 8(p k ,p k+1 ) ^ oo, then L Gs „(p) = 
Lg s {P) > 8(i, j) > K. Otherwise, 

Lg s „ (p) = by definitions of 8' and 8" 

= Lg s ,{j>) + d ■ \{k G [n — 1] | 8(pk,Pk+i) = oo}| > as this set is non-empty 

> L Gs , (p) + d > by definition of 8' 

> 8' (J, j) + d = by definition of K 
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Either way, the proof is complete. □ 

While unimplementable functions whose canonical forms differ may exist (due 
to / not necessarily being finite, and due to the fact that G$ needs not necessarily 



be strongly connected), we now conclude, using Lemma 5.9, that for implementable 
functions, the map 8 (->■ T(8) from the canonical form of an implementable function 
8 to the set of implementations of 8 is a well-defined, order-preserving, monomor- 
phism. 

Corollary 5.10. Let I be a set and let 61,62 : J 2 — > Z\ s.t. 8\ is implementable. 
6i<6 2 iffT(8 x )QT(8 2 ). 



Proof. =>: Assume that 8% < 62 ■ By monotonicity of T and by Remark 5.6 (equiv- 
alence), we have T(8±) = T(8\) C T(8 2 ) = T(8 2 ). 

<=: Assume that 8\ ^ 82- Thus, there exist i,j G / s.t. 5i(i,j) > 8 2 (l,j). If 



8x(z,j) < 00, then by Lemma 5.9 there exists t G T(8i) s.t. t(j) — t(T) = 8i(t,j) > 
82(1, J), and thus t G T(8i) \ T(8 2 ), and the proof is complete. 

If 8i(i,j) = 00, then 82(1,3) < 00 and thus there exists K G T s.t. K > 8 2 (i,j)- 



Similarly to the proof of the previous case, by Lemma 5.9 there exists t G T{8\) s.t. 
t(J) — t(l) > K > 82(1,3). Once again, we obtain that t G T(8i) \ T(8 2 ), and the 
proof is complete. □ 

Corollary 5.11. Let I be a set and let 81,82 '■ I 2 — > A s.t. at least one of them is 
implementable. 8\ = 8 2 iff T (Si) = r(5 2 )- 



Proof. =^>: Assume that 8\ = 82- By applying Remark 5.6 (equivalence) twice, we 
obtain T(8i) = T(8 X ) = T(8 2 ) = T(8 2 ). 

<=: Assume that T(8\) = T(5 2 )- Thus, since at least one of 81,82 is im- 



plementable, they both are. To complete the proof, we apply Corollary 5.10 to 



T(6i) C T(8 2 ) and to T(8 2 ) C T(8 1 ). □ 

The above discussion gives rise to two alternative definitions (or rather, char- 
acterisations) of the canonical form of implementable functions: The first one, 
non-constructive in nature, justifies the name of the minimality property stated 



in Remark 5.6 and stems from this property when combined with Corollary 5.11 
The second one, which constructively defines the inverse of the order-preserving 
monomorphism 8 t— > T(8), stems directly from Lemma 



5.9 



Corollary 5.12. Let (1,8) be an implementation- spec s.t. 8 is implementable. 



25 



1.5 = minj^' G Z\^ /2 ^ | T(S') = T(5)}. (In particular, there exists a function 
in this set, which is minimal in each coordinate, although this may be proven 
directly by means of a simpler argument.) 

2. Vz, j G / : 5(i,j) = max{t(i) - r(z) | t G T(5)}. 



Remark 5.13. Implementability of S is not required in Corollary 5.12 if \I\ < oo 
and if G$ is strongly connected. Indeed, under such conditions, if 5 is unimple- 
mentable, then 5 = — oo, which coincides with the function obtained in both parts of 
this corollary, when they are applied to any unimplementable 5. 



By applying Claim 5_4 to the previous three corollaries, we obtain similar results 
regarding the map 5 t— > TCi? 7 (e, /, 5) from the canonical form of an implementable 
function 5 to the timely-coordinated response problem that 5 defines with respect 
to a fixed external input. We conclude this chapter by formulating these results. 

Corollary 5.14. Let 7 be a context, let I C ty and let e G s.t. TCi? 7 (e, 1,0) is 
solvable^} 

• Let 5 U 5 2 : J 2 — > A 

1. If Si is implementable, then: 8\ < 5 2 iff TCR 7 (e,I,Si) C TCR 7 (e,I,S 2 ). 

2. If either 5± or 5 2 are implementable, then: 5± = 6 2 iff TCi? 7 (e, 1 ,5\) = 
TCR 1 (e,I,8 2 ). 

• Let 5 : I 2 — >■ A be implementable. ( Once again, implementability of 5 is not 
required for this part if \I\ < 00 and if Gs is strongly connected.) 

1.8 = mm{5' G A^ | TCi? 7 (e, 1,5') = TCR^e,I,5)}. 

2. G / : 5(i, j) = max{ t r (j) - t r (i) | r G lipeTCR^ej^R^P)} ■ 

Readers who found our choice from the previous chapter, to formally associate 
a coordinated response problem with the set of solutions thereof philosophically 
troubling, may find some justification for this choice in the first part of Corol- 



lary 5.14 This part essentially shows that in order to accept our choice, at least 
when TCi? 7 (e, /, 0) is solvable and for implementable 5, it is enough to accept that 
TCi? 7 (e, /, 5) is the same problem as TCi? 7 (e, /, 5). 



* As noted above regarding Remark 5.2 Corollary |9.7| shows that under certain conditions, 



the function in Corollary 5.14 may be replaced with a variety of other functions. 



Chapter 6 

The Syncausality Approach 



In this chapter, we analyze the timely-coordinated response problem using tools 
developed by Ben-Zvi and MosesjHIE], and generalize some previous results obtained 
by them [HI El E] using these tools. The proofs that we give in this chapter, unlike 
the proofs in [HI El [7J |8] , do not explicitly use the concept of knowledge. We choose 
to phrase our proofs in this way in order to emphasize the difference between the 
approach taken in this chapter and that of the next one. 



6.1 Background 

This section surveys previous definitions and results from [HI El 13 E]. 

6.1.1 Partial Orders on the Set of Agent-Time Pairs 

Recall that we work in a context consisting of a set of agents I 7 that communicate 
with each other solely via message passing, and that their communication channels 
are modeled by the edges of the directed graph Q y = (I 7 , N y , 5 7 ), each of which 
being weighted according to the maximum delivery time of a message along it. 

Ben-Zvi and Moses [HI E] define two partial order relations on the set of agent- 
time pairs II 7 x T. The first, called "syncausality" (short for synchronous causality), 
is a synchronous counterpart to Lamport's "happened-before" causality relation [T7j. 
and similarly aims to capture information flow. Intuitively, if (i,t) ~p (J,t'), then 
in some sense, j potentially has, at t' in r, information regarding the state of i at t 
in r. (In a full-information protocol, this intuition can be made more concrete: the 
state of % at t in r can be deduced with absolute certainty from the state of j at t' 
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in r.) 

Definition 6.1 (Syncausality). Let'-f be a context and letr G TZ 1 . The "Syncausal- 
ity" relation ~p is the minimal partial order relation on I 7 x T satisfying (i.e. the 
transitive closure of) 

• Locality: Vi G I 7 , £/gT: tf > t ~> 

• Message delivery: If, in r, a message is sent from i G I 7 at t G T and delivered 
to j G I 7 at t' > t, then (i, t) *p (J } f). 

• Delivery guarantee: (i,t) ~* (j,t + bj(i,j)), for every (i,j) G iV 7 s.t. 

< oo, and for every t G T. 

The syncausality relation is a refinement of Lamport's "happened-before" causal- 
ity relation [17], which is defined similarly, with the only difference being the absence 
of the delivery guarantee property. At first sight, this property may seem redundant 
due to the message delivery property Indeed, the bound guarantee property is of 
importance only if a message is not sent from i to j at t. Intuitively, j has a guaran- 
tee that i did not send it a message at t, only when the worst-case delivery time for 
such a message has elapsed, i.e. at t + b y (i,j). Passing information by not sending 
a message was first studied by Lamport |18j. who called such unsent messages "null 
messages" . 

The second partial order relation on I 7 x T, called "bound guarantee" , aims to 
capture guaranteed information flow, and thus has no asynchronous counterpart. 
Intuitively, if (i, t) —■* (j,t ), then in some sense, it is not only that j potentially 
has, at t' in any run r, information regarding i at t in r, but also that i has some 
guarantee at t in r that such information has the potential to reach j by t' in r at 
the latest. (In a full-information protocol, this means that from the state of i at t 
in r, it can be deduced (with absolute certainty) that this state may be deduced 
from the state of j at t' in r.) 

Definition 6.2 (Bound Guarantee). Let 7 be a context. The "Bound Guarantee" 

7 

relation is the minimal partial order relation on I 7 x T satisfying: 

• Locality: Vz G I 7 ,t,t' G T : t' > t (i,f) --■> (i,t). 

• Delivery guarantee: (i,t) —■* (j,t + b 7 (i,j)), for every G iV 7 s.t. 
b-yihj) < oo, and for every t G T. 
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Remark 6.3. As would be expected by the intuitive descriptions of both relations 
above, the bound guarantee relation is a subrelation of any syncausality relation: 
If(i,t) thenar G ft 7 : (i,t) Z (j,f). 



6.1.2 Additional Notation 

We now introduce some novel notation, which aims to capture the flow of infor- 
mation regarding the occurrence of events, and the flow of information which may 
affect the occurrence of an event. This notation will both aid us in more succinctly 
presenting some previous results of Ben-Zvi and Moses in the next subsection, and 
in presenting our results thereafter. 

Definition 6.4. Let 7 be a context and let r G 

1. Given an event e G E{r) and an agent-time pair (i,t) 6 I 7 x T, we write 
e -£» (i,t) (resp. e — * (i,t)J if (i e ,t e ) (i,t) (resp. {i e ,t e ) —■* {i,t)), where 
by i e we denote the immediate observer of e. (Recall from Chapter^ that t e 
is the occurrence time of e.) 

2. Given two events e, e' G E{r), we write e e' (resp. e --■» e') if either e = e' 
or e' is a delivery of a message sent by an agent i G I 7 at time t G T s.t. 
e f (i,t) (resp. e — * (i,t)J. 

Once again, in a full-information protocol, some of the implications of these 
definitions become very concrete, e.g. e (i,t) guarantees that the occurrence of 

e may be deduced from the state of i at t. Similarly, e -p- e guarantees that if 
e' is a message event, then the occurrence of e may be deduced from the contents 
of the message associated with e'. Moreover, if e e' does not hold, then the 
occurrence of e 1 does not depend, in a sense, on the occurrence of e. We make this 



last observation precise in Corollary 6.30 below 



6.1.3 Previous Results 

In this subsection, we survey the coordinated response problems defined and studied 
by Ben-Zvi and Moses in [SI El El E] , and their results for these problems in discrete- 
time models. (The only coordinated response problem from |1 |5[ || that we 
do not survey in this subsection, namely "general ordered response", is discussed 
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in Chapter 10 ) We reformulate these problems, results, and the associated defini- 
tions to match our notation, and to make use of our coordinated-response-theoretic 
definitions. 

While surveying all these coordinated response problems, and while remarking, 
by defining an appropriate 5 function, that the timely-coordinated response problem 
extends each and every one of them (and also extends general ordered response), 
one property, which is common to all these 5 functions, should be spelled out ex- 
plicitly: 5 is antisymmetric on each strongly-connected component of G$^\ As we 
will see during this work, the absence of this property in the timely-coordinated 
response problem introduces a significant amount of complexity, both technically, 
and conceptually. 

The first, most-basic coordinated response problem defined in [61 15] is that of 
ordered response. 

Definition 6.5 (Ordered Response). Given a context 7, an external input e £ E 7 , 
n £ N and agents % = (i m )^ =1 £ I 7 ™, define the "ordered response" problem 
OR y (e,i) C ER 7 (e, {i m }^ =1 ) as the set of all eventual-response protocols P satisfy- 
ing t r (i m+ i) > t r (i m ) for every m £ [n — 1] and for every triggered run r £ R^(P). 

Remark 6.6. 0R 7 (e, (i m )l=i) = TCR^e, {i m } n m=l ,5) , for 



A 



k = l+l 
00 otherwise. 



Ben-Zvi and Moses analyze this problem using a structure they call "centipede" . 

Definition 6.7 (Centipede — see Figure [TJ. Given a context 7, a run r £ 1Z 7 , 
an external input e £ E 7 , n £ N, and agents 1 £ I 7 ™ ; with matching times i = 
(£ m )J^ =1 £ T n , we call an n-tuple of ND events e = (e m )^ =1 £ ND 1 (r) n an "e- 
centipede" for % by t if the following hold: 

• e^ei and Vm £ [n - 1] : e m & e m+1 . 

• Vm £ \n] : e m (i m ,t m ). 



* It is interesting to note, though, that some instances of the timely-coordinated response 
problem, while having this property, are not instances of any of the problems defined and studied 
by Ben-Zvi and Moses. We analyze such instances in the second part of Corollary 9.5 
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Figure 1: (ei,e2,es) is an e-centipede for {i, j, k} by (ti,tj,tk)- 

Given a time t G T, we call an n-tuple of ND events e G ND 1 (r) n an "e- centipede' 
for i by t, if it is an e-centipede for i by {t) n . 



Theorem 6.8 (Centipede). In a discrete-time model, let 7 be a context, let neN, 
let T G I 7 n and let e G E 1 . 

1. Let P G 0R 7 (e,i). Each r G R^(P) contains an e-centipede fort by t r (i n ). 

2. In a shared-clock model, an optimal response logic for solving OR 1 (e,i) is, 
for every i m : "respond at the earliest time by which an e-centipede for (ifc)^Li 
exists. " 



Ben-Zvi and Moses prove the first part of Theorem |6.8| in two stages: First, 
reducing to a response-recalling protocol (a protocol in which the set of responses 
of an agent up until time t may may be deduced from its state at t), they show that 
under the conditions of that part of the theorem, at t r (i n ) it holds that Ki n ■ ■ ■ K^e 
(where Ki means u i knows that. . . " — this will be formally defined in Chapter [7]). 
Second, conceptually following the path of Chandy and MisraJH], they deduce the 
existence of the required centipede from this nested-knowledge formula. 



Regarding the second part of Theorem 6^8, it should be noted that Ben-Zvi and 
Moses do not define a notion of optimality, but rather show that a full-information 
protocol with the given response logic solves 0R 7 (e,i). (Optimality, under our 



definition, may be derived from the combination of the two parts of Theorem 6.8 
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which Ben-Zvi and Moses prove as separate theorems.) A similar note holds for the 
second part of Theorem |6.12| below. 

The second problem presented in [HI E] is the following variant of the firing squad 
problem |2U Eg. 

Definition 6.9 (Simultaneous Response). Given a context 7, an external input e G 
E~t and set of agents I C I 7; define the "simultaneous response" problem SR 7 (e, I) C 
ERry(e,I) as the set of all eventual-response protocols P for which t r is a constant 
function for each run r G i? 7 (P). We denote, in this case, the constant value of t r 
by t r . 

Remark 6.10. SR y {e,I) = TCR 7 {e,I,0). 

Ben-Zvi and Moses analyze this problem using a structure they call "broom" . 




> 



Figure 2: (ei, e2, 63) is an e-broom for k} by t. 



Definition 6.11 (Broom — see Figure [2]). Given a context 7, a run r G IZ^, an 
external input e G E 1 and a set of agents I C I 7 with matching times i = {ti)i & i G 
T 1 , we call an ND event e G iVD 7 (r) an u e-broom" for I by i if the following hold: 

~ 7 

• e e 

• Wi G / : e — > (i,ti). We call {{i,ti)} ie i the set of "end nodes" of this broom, 
and call max{t| the "horizon" of this broom. 
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Given a time t G T ; we call an ND event e G iVD 7 (r) an "e-broom" for I by t, if it 
is an e-broom for I by (t) 1 . 

Theorem 6.12 (Broom). In a discrete-time modelfj let 7 be a context, let I C I 7 
be finite, and let eG£ 7 . 

• Let P G S'i? 7 (e, I). Each r G Rj{P) contains an e-broom for I by t r . 

• In a shared-clock model, an optimal response logic for solving 57? 7 (e, I) is, for 
every i G /: "respond at the earliest time by which an e-broom for I exists. " 



Ben-Zvi and Moses prove the first part of Theorem 6.12 by reducing to a 
response-recalling protocol, showing that under the conditions of that part of the 
theorem, e is common knowledge among all agents in / at t r , and then using a reduc- 



tion to the first part of Theorem 6.8 We give a direct proof of a slight generalization 



of Theorem 6.12 later in this work (see Theorem 9.12). 

The third and last problem presented in [5], is the following generalization of 
both ordered response and simultaneous response. 

Definition 6.13 (Ordered Joint Response). Given a context 7, an external input 
e G E 1 , nGN and pairwise- disjoint non-empty sets of agents I = (J m )^ =1 G (2 I "') n , 
define the "ordered joint response" problem OJR^(e,I) C ER 7 (e, U^j =1 / m ) as the 
set of all eventual-response protocols P satisfying, for every run r G R^(P): 

1. t r \i m is a constant function, for each m G [n]. We denote its value by t r ^ m . 

2. Vm G [n - 1] : t r>m +i > t r , m . 

Remark 6.14. OJR y {e,I) = TCi? 7 (e, U™ =1 J m , 5) , for 



A 



3 k, I G [n] : i G I k & j G I t & k > I 
00 otherwise. 



Ben-Zvi and Moses analyze this problem using a structure they call "centib- 
room" , which generalizes both a centipede and a broom. 



Definition 6.15 (Centibroom — see Figure [3]). Given a context 7, a run r G IZ^, 
an external input e G E 1; n G N, and pairwise- disjoint non-empty sets of agents 
I G (2 l7 )" with matching times i G T 1 , where I = U^ =1 J m; we call an n-tuple of 
ND events e G ND^(r) n an "e- centibroom" for I by i if the following hold: 



* This is a key requirement here. 
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Figure 3: (ei,e2,e3) is an e-centibroom for ({/, g, h}, {i,j}, {k, I}) by 

(tf )tg>thitii tj > tk > tl ) 



e ei and Vm e [n — 1] : e m e m+i . 



• Vm G [n],i G J m : e m --• > VKe ca// {(i,tj)} ie / t/ie set of "end nodes" of 

this centibroom, and call max{ff the "horizon" of this centibroom. 

Given a time it 6 T, we call an n-tuple of ND events e G NDj(r) n an "e-centibroom" 
for I by t, if it is an e-centibroom for I by (t) n . 

Theorem 6.16 (Centibroom). In a discrete-time modelj^ let 7 be a context, let 
n£N, let I £ {2 ll ) n be pairwise- disjoint non-empty finite sets of agents, let e G E 1 
and let P G OJRj(e,I) . Each r G R^{P) contains an e-centibroom for I by t r>n . 



Ben-Zvi and Moses prove Theorem 6.16 by reducing to a response-recalling pro- 



tocol, showing that under the conditions of that part of the theorem, at t r ^ n it holds 
that Cj n ■ ■ ■ C^e (where Cj means "it is common knowledge among J that. . . " - 
this will be formally defined in Chapter [7]), and then using a reduction to the first 



part of Theorem 6.8 



In [5], the following respective generalizations of ordered response and simul- 
taneous response were introduced: (once again, we rephrase them to match the 
definitions and notation introduced in this work.) 



Once again, this is a key requirement here. 
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Definition 6.17 (Weakly-Timed Response). Given a context 7, an external in- 
put e E Ej, n E N, agents 1 E I 7 n and finite time- differences e = {e m ) r ^_ 1 E 
(A\ {— 00, oo})™" 1 , define the "weakly-timed response" problem WTR~(e,t,e) C 
ERry(e, {i m }^ =1 ) as the set of all eventual-response protocols P satisfying t r {i m+ i) > 
tr{im) + £m for every m E [n — 1] and for every triggered run r E R^(P). 

Remark 6.18. WTR 7 (e, (i m )l =1 , e) = TCR 7 (e, {i m } n m=1 : $) , for 



A 



-e x k = I + 1 
00 otherwise. 



Definition 6.19 (Tightly-Timed Response). Given a context 7, an external input 
e E Ej and a set of agents I C I 7 with matching times i E T 1 , define the "si- 
multaneous response" problem TTR 1 (e 1 I ,t) C ER 7 (e,I) as the set of all eventual- 
response protocols P satisfying t r {i) — t r (j) — ti — tj for every i,jEl and every 
run r E i? 7 (P). 

Remark 6.20. TTRj(e, I,t) = TCR^eJ^), for5(i,j) =tj~U. 

Ben-Zvi and Moses present the following theorems in [5] , and prove them along 
the lines of their proofs of the first part of Theorem |6.8| and the first part of Theo- 
rem 



6.12, respectively. 



Theorem 6.21 (Uneven Centipede). In a discrete-time model, let 7 be a context, 
let n EN, let iE I 7 " ; let e E (A\ {-00, oo}) n_1 , let e E E y and let P E OR y (e,i) . 
Each r E R^{P) contains an e-centipede fort by (t r (i n ) — Y^k=m £k )m=i- 

Theorem 6.22 (Uneven Broom). In a discrete-time modelj^ let 7 be a context, let 
I C I 7 be finite, let t E T 1 , let e E £ 7 and let P E SR 7 (e,I). Each r E R^{P) 
contains an e-broom for I by {t r {i)) i( zj. 



6.2 Adapting Some Machinery 

Before approaching the timely-coordinated response problem using the definitions 
surveyed in the previous section, we adapt some of the machinery used by Ben-Zvi 
and Moses to obtain the results surveyed therein. In order to do so, we introduce, 
yet again, some additional novel notation and definitions. 

* Yet again, this is a key requirement here. 
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Definition 6.23. Let 7 be a context and let r G TZ 7 . 

• Given a time i G T, we denote the set of all ND events occurring in r no later 
than t by ND y (r,t) = {e G ND y (r) \t e <t}. 

• Given an agent-time pair 9 G I 7 x T (resp. an event 9 G E{r)), we define 
the "ND past" of 9 in r as PND r 7 (6) = {e G ND y (r) \ e -w 9}. Note that 
PND r {9) C ND 7 (r,t), where 9 = (i,t) (resp. t — t$). For an agent-time pair 
(i,t), we sometimes write PND^(i,t) instead of PND r ({i,t)), for readability. 

Definition 6.24 (Subruns). Given a context 7, a protocol P G P 7 , a time t G T 

t 

and runs r,r' G Rj(P), we call r' a l t-subrun" of r, and write r' C r, if the initial 

states used for all agents in r' and in r are the same, and if ND 7 (r' ,t) C ND 1 (r,t). 

(We omit P and 7 from this notation for readability, as they will be clear from the 

t 

discussion.) For fixed P and t, we note that C is a quasi-order relation on R 1 {P), 
in which two runs are in the same equivalence class iff they are indistinguishable 
until t, inclusive. 

Definition 6.25 (Retainable Subsets). Given a context 7, a protocol P G P 7 , a 
run r G Ry(P) and a time t G T, we define the 't -retainable" subsets of ND 1 (r) as 

RND p f (r;t) 4 {ND^r^t) |r'Cr}C 2 ND ^\ 
Furthermore, for every E G RND^(r,t), we denote 

rf]E = {r' C r I ND^r, t) = E} ^ 0, 

(Again, we omit P and 7 from this notation as they will be inferred from the discus- 

t 

sion.) We sometimes slightly abuse notation by using rHE to refer to one such run 

and not to the whole set, if the choice of representative is inconsequential. (This is 

t t 
often the case, as r D E is an equivalence class of C.J 

Remark 6.26. Let 7 be a context, let P G P 7 , let r G R~,(P) and let t G T. By the 

above definitions: 

• Vt G T : ND 7 (r,t) G RND^(r, t), and r G r n ND^(r,t). 

• If E G RND*(r,t) and if E' G RND?(r n E,t') for some t' G T s.t. t' < t, 

t t' t' 

then by definition, E' C E, E' G RND^(r,t') and (r n E) n E' = r n £". 
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Claim 6.27. Let 7 be a protocol, let P G P 7 , let r G Ry(P) and let t,t' G T. If 

t' < t, then RND*(r,tf) C RND*(r,t). Furthermore, for every E G RND^(r,f), 
t 

there exists r G r n E s.t. ND y (r) D E y C E. 



Proof Sketch. Let E G RND^(r,t'). For the continuous-time model presented in 



Appendix 



A 



n 

the claim follows by applying the "no foresight" property to r H E at 



t' and with d = t. For the discrete-time model presented in Chapter [3j we construct 
a run r G r fl E s.t. ND y (r'j D E y C. E, as follows: r is identical to r (1 E until 
inclusive. After t', the agents behave in r' according to P, and the environment 
triggers no more ND events, except for deliveries of sent messages that have an 
infinite bound guarantee (as such non-deterministic deliveries must be triggered at 
some time during the run, for the run to be legal). Each such message is delivered at 
max{t + 1, t" + 1}, where t" is the sending time of this message. It is straightforward 
to inductively check that the resulting run r' is well defined and legal — we omit 
this cumbersome check, which runs along similar lines of some of the proofs from 
[6] , in favor of the many, more interesting, pages ahead. □ 

We now present and adapt some machinery developed by Ben-Zvi and Moses 
in their analysis [6l |5] of the ordered response problem. Their discrete-time analysis 
essentially shows the following lemma, which we rephrase using our notation. For 
the continuous-time model presented in Appendix |A| the first part of this lemma is 
equivalent to the "no extrasensory perception" property, and its second part follows 
from the definition of a run. 

Lemma 6.28. Let 7 be a context, let P G P 7 and let r G Ry(P). For every t G T ; 

RND^{r,t)^{PND r 1 {i,t)\iel y }, 

t 

and for each i G I 7 , the state of i at t is identical in r and in all the runs r fl 
PND r 7 (i,t). 



By applying Claim 6.27 we obtain the following generalization of Lemma 6.28 

Corollary 6.29. Let 7 be a context, let P G P 7 and let r G R 1 (P). For every 
t G T, 

RND^(r, t) D {PND*(i,lf) \ i G I 7 & t' < t}, 

and for each i G I 7 and each t' < t, the state of i at t' is identical in r and in all 
the runs r H PND r (i,t'). 
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We note, without a proof, that this result can be further generalized as follows, 
at least for the cases listed below. 

Corollary 6.30. In a discrete-time model, or in a continuous-time model with 
finitely many agents, let 7 be a context, let P E P 7 and let r e i? 7 (P)Jj For every 
t e T, 

RND*(r,t) 3{£C ND y (r,t) | Ve G E : E D PND*(e)}, 

with equality if P is a full-information protocol. Furthermore, for every E e 

RND*(r,t) and for every (i,t') 6 I 7 x T, if PND r 7 (i,t') C E, then the state of 

t 

i at t is identical in r and in all the runs rHE. (If P is a full-information protocol, 
then the converse holds as well.) 



We do not require Corollary |6.30[ though, as Corollary |6.29| suffices for all the 
proofs that we give below. 



6.3 Analyzing Timely- Coordinated Response 

We now turn to define the structure that stands at the heart of our syncausal 
analysis of the timely-coordinated response problem. 




Figure 4-' (e m )m=i * s an ((*> 3i h 3t *)> $) -traversing e-centipede by t. 



* As discussed in Appendix |XJ for certain "nice" protocols P, the requirement for only finitely 
many agents in a continuous-time model may be relaxed to the requirement that inf(6 7 ) > 0. 
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Definition 6.31 (Path- Traversing Centipede — see Figure |4J). Given a TCR-spec 
(7, e, I, 6), a path p = {p m )m=i e "P{Gs) an d a run r G TZ 7 , we call an n-tuple of 
ND events e G ND^(r) n a "(p, 5) -traversing e-centipede" by t if the following hold: 

• e e n and Vm G [n - 1] : e m+ i -X e m . 

• Vm G [n] : e m (p m ,t + A? s ((Pfc)fc^i))- We caW {(p m , t + W(p*)£=i))KUi 
£/ie set 0/ "end nodes" of this centipede. 

Remark 6.32. e™ = (e n _ m+ i)^ =1 zs an e-centipede for p rev (as a tuple of agents) 
by i rev , where for every m G [n], t m = t + L Gl5 ((Pfc)™=i)- T/ras > Wi = *m + 
5(p m ,p m +i) /or every m G [n - 1]. 

Remark 6.33. Lei (7, e, 7,5) fre a TCR-spec, let p G V(G$) and let r G 7?. 7 . i??/ 
£/ie akwe definition: 

• No (p, 5)-traversing e-centipede exists in r, if p traverses an edge with a weight 
of —00 in G5. 

• Any (p, 5)-traversing e-centipede bytinr is also a (p, 5') -traversing e-centipede 
by t' in r, for every 5' > 5 and every t' > t, by the locality property of bound 
guarantee. This justifies the phrasing "path-traversing centipede by t" . 

• Let e = [em)m=i ^ e a (Pi 8) -traversing e-centipede by t in r , then (e m )^ =fc is a 
{(j>m)m=ki $)-traversing e-centipede by f + iG 5 ((p m )m=i) ^ n r > f or ever U k G [n]. 
We call this path-traversing centipede the "k-suffix" of e. 

The following theorem, once stated, may be proven using the tools that are 



applied in [8] for proving Theorem 6.21 We provide a somewhat different and 
more concise proof here, also for the sake of emphasizing the fact that the approach 
studied in this chapter requires no direct use of the concept of knowledge. 

Theorem 6.34 (Path- Traversing Centipede). Let (7, e, I, 5) be a TCR-spec and 
let P G TCRj(e,I,5). Each r G R*(P) contains a (p, 5) -traversing e-centipede by 
U(Pi), for every p G V{G S ). 

Proof. By induction on n, the number of vertices in p. (p = (pm)m=i-) 

Base: If n = 1, denote i — pi (and thus, p = (i)). Since r G R*(P), we claim 
that e -X (i, t r {i)). Indeed, by Corollary 



6.29 



and by Claim 



6.27 



run r' G Ry(P) for which ND^r' , t r (i)) =~TND r Ji } t r (i)) ancTm 



there exists a 
which the only 
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occurring external inputs are those that are in PND^(i, t r (i)). Furthermore, both 
the state of i, and the events observed by it, are identical in r and in r' up to 
and including t r (i), and thus t r /(i) = t r (i) < oo. By correctness of P, this implies 
r' G R*(P), and thus e G ND 7 (r) n £ 7 C PND r ^(i, t r (i)), as required. Thus, there 
exists a syncausal path in r from e to (i, t r (i)). Denote the latest among the ND 
event along this path by e G ND y (r). By definitions of syncausality and of bound 
guarantee, e e (i, t r (i)). Thus, (e) is a path-traversing centipede as required. 



Induction step: Assume n > 2. Set i = pi, j = p%, E = 



PND^i, t r (i)) and 



t = max{t r (i), t r (z) + <5(i, j)} < oo. As t r (i) < t, by Corollary 6.29 we obtain that 



E G RND^(r,t), and that the state of i at t r (i) is the same in r fl .E and in r. 
Therefore, t r ^ E {i) = t r (i), and thus, by correctness of P, we obtain 

trneO') < trns(i) + j) = + j)- 

By the induction hypothesis, there ex ists a ((p m )m=2i (^-traversing e-centipede 

I I * 

by trn-Ev) (and thus, by Remark 6.33, by t r (i) +6(i,j)) m rf]E, and thus 



also in r (as t r (i) + <t). To complete our proof, we note that 



e 2 ePND r ™(j,t r (i) + 5(i,j))C 
C iVD 7 (r n t r (z) + 5(z,j)) c 
C iVL> 7 (r n E, t) = E = PNDUi, t r (i)). 



by definition of PND 

as t r (i) + 5(i,j) < t 



and therefore e2 •£» (i, t r (i)). As in the induction base, there exists ei G ND^(r) s.t. 
^2 ei — ■* (z, t r (i)). Thus, (e m )^ =1 is a path-traversing centipede as required. □ 



It should be noted that by Corollary 5.14, a (p, (^-traversing e-centipede is also 



implied by Theorem 6.34 for every p G V(G$) under the conditions of that theorem. 



Furthermore, this result is at least as strong as the verbatim result of that theorem 



for 8, by minimality of the canonical form, by Remark 6.33 and as V(Gs) Q P(G 



It may be readily verified that if the distance between every pair of agents in G$ is 
attained, then these results are in fact equivalent, as any path-traversing centipede 
guaranteed by Theorem 6.34 for 8 is a (possibly trivial) subcentipede (i.e. subtuple) 



of a path-traversing centipede directly guaranteed by it for 8 (for a possibly different 
path). Henceforth, whenever minimizing the times of the end nodes of the guaran- 



teed path-traversing centipede is of the essence (as is the case in e.g. Corollaries 9.4 
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and 9.5 and Claim 9.14), we indeed apply Theorem 6.34 using 5. 



We now apply Theorem 6.34 to deduce an optimal response logic for the timely- 



coordinated response problem in shared-clock models. 

Corollary 6.35. In a shared-clock model, let (7, e, /, 5) be a TCR-spec. An optimal 
response logic for solving TCR^(e, 1,5) is, for every i G I: "respond at the earliest 
time by which a (p, S)-traversing e-centipede exists for every path p G V(Gs) starting 
at pi = i". 

Proof. Assume that TCR^(e,I,5) is solvable and let P G TCR 7 (e,I,S). W.l.o.g., 
P is a full- information protocol. Let P' be the (full-information) protocol obtained 
by endowing P with the above-defined response logic. We first prove the optimality 
of P' in each triggered run, and then prove that it indeed solves TCi? 7 (e, J, 5). 
Let r G R^{P) and r' G R^(P') be two runs matched under the natural iso- 



morphism between R 1 {P) and R 1 {P') and let i G I. By Theorem 6.34, all path- 
traversing centipedes required for i to respond according to P' exist in r (and hence 
in r') by t r (i) (at the latest), and therefore t r i(i) < t r (i). (The fact that P' is a 
full-information protocol, together with the existence of a shared clock, guarantees 
that if such path-traversing centipedes exist by some t £ T, then % can deduce this 
at t. For the continuous-time model presented in Appendix |Aj the fact that i is 
enabled at every supremum of times at which it observes events allows i to respond 
at the required time.) 

We now prove that P' G TCR 7 (e,I,5): Let r' G i? 7 (P'). Obviously, no path- 
traversing e-centipedes exist in r' if e does not occur. Therefore, if r' ^ R^(P') then 
t r = 00. We are left with the case in which r' G R^(P'). Denote by r £ R^{P) the 
run of P matching r' under the natural isomorphism between R y {P) and R 1 (P > ). 
By the first part of this proof, t r i < t r < 00. Let (i,j) G I 2 s.t. < 00. For 

every p G V(Gg) s.t. p\ = j, denote by p' G V(Gg) the path commencing at % and 
whose 2-suffix is p. By definition of P', a (p', 5)-traversing e-centipede exists in r' 
by t r i{i) (at the latest), and thus its 2-suffix, which is a (p, 5)-traversing e-centipede, 
exists in r' by t r i{i) + 6~(i,j) (at the latest). Hence, all path-traversing centipedes 
required for j's response according to P' exist in r' by t r i{i) + 5(i,j), and thus 
U'U) ^ t r '(i) + 5(i,j), as required]^] □ 

We conclude this chapter with a practical note that motivates some of our dis- 



The attentive reader may notice a conceptual similarity between this argument and the 



second part of the proof of Lemma 5.7 
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cussion in Chapter [9j In that chapter, we derive somewhat more practical results 
from the above discussion, for some naturally-occurring models that we define. 

The results of Ben-Zvi and Moses that are surveyed in the beginning of this chap- 
ter imply that for each of the coordinated response problems they have studied, it is 
enough for an agent i to deduce the existence of a single, simple, syncausal structure 
in order to respond according to the optimal response logic for this problem. In 
contrast, from the definition of the optimal response logic for the timely-coordinated 



response problem from Corollary |6.35[ it may seem that in the case of a general 
constraining function 5 (i.e. 5 that does not reduce to e.g. one of the special cases 
studied by Ben-Zvi and Moses), for an agent i to respond according to this logic, 
i is always required to check for infinitely many, arbitrarily long, path-traversing 
centipedes (using infinitely many facts stored in the memory/state of i). While in 
the general case this is true, the following remark shows that for any constraining 
function 5, in some cases finitely many syncausal structures may imply the exis- 
tence of all (infinitely many) path-traversing centipedes required for i's response. 
Conceptually, this means that finitely many checks (of finitely many facts) may 
provide enough information for i to respond at a specific time according to this 
logic. In Chapter |9j we show that under certain practical assumptions, finitely 
many not-much-more-complicated checks always suffice. 

Remark 6.36. Let (7, e, J, 5) be a TCR-spec s.t. 5 is implementable, and letr G 7£ 7 . 
If e G ND^{r) is an e-broom for I in r by i G T 1 s.t. sup(t) < oo ; then for every 
P = (Pm)m=i e ^P{Gs), (e) n is a (p, 5) -traversing e-centipede in r by 

m ax{t Pfc - L Gs (( Pm ) k m=1 )} < max{t Pfc - Sfapk)} < sup(t) - inf (<% l}x/ ) < 00. 
In particular, for every agent % G I, (e) n is a (p, S) -traversing e-centipede by 



sup(t) — inf(5|{j} x j) (which is finite by implementability of 5 and by Lemma 5.1), 
for every n G N and every p = (p m )™ =1 G V(Gg) starting at p 1 = i. Thus, by this 
time i will have received information guaranteeing that e had occurred, which will 
have given i enough information in order to respond by that time according to the 
optimal response logic presented in Corollary \6. 35\ 



* We note that it is possible to construct an alternative argument as to why there exists, 
under certain conditions, a solving finite-memory protocol according to which each i responds by 
that time. Such an argument may be constructed by combining a variation of the second part 



of Theorem 6.12 with the second part of Lemma |5.7| and with the second part of Claim 5.1 



Conversely, Remark 6.36 may be used to construct an alternative proof for parts of Lemma 5.7 



Chapter 7 

The Fixed-Point Approach 



We now set aside, for the moment, the results of Chapter [6] and embark on a parallel, 
independent analysis of the timely-coordinated response problem using fixed-point 
analysis. While the basis of this analysis follows the lines of (TTJ Section 11.6], we 
formalize it here using events, along the approach of Aumann[3], instead of using 
the temporal-epistemic logic tools used in [11]. (The treatment in either form is 
analogous, although it is somewhat more concise for our case with the notation used 
below, which facilitates the study of fixed points.) 

7.1 Background 

In this section, we survey previous definitions and results from [11], upon which our 
analysis below is founded, reformulating them using events, and adapting them to 
our notation. 

7.1.1 Events, Knowledge and Common Knowledge 

In order to begin our discussion, we define the space in which we work. 

Definition 7.1 (Space). Let 7 be a context and let R C 1Z 1 . We define Qr = R x T 
andJ= R = 2 Qr . 

As in probability theory, we represent events using the set of points (i.e. run-time 
pairs) in which they hold. (In contrast to probability theory, though, we do not 
need to define a measure on the set of events, so we choose to allow any subset of f2 R 
to constitute an event.) For example, we may define the event "z is responding" for 



42 



7.1. BACKGROUND 



43 



some i G I 7 , which is formally associated with all points (r,t) G Qr s.t. i responds 
at t in r. 

We now incorporate the concept of knowledge into our discussion. Given an 
event if> G J-r, we wish to define, for some agent i, the event u i knows that if) holds" 
(e.g. i knows that j is responding). Choosing how to formalize a concept as abstract 
and as subjective as knowledge is not a simple issue. We present below what has 
become a standard definition for knowledge, and avoid discussing its relation to 
the abstract, philosophical, concept of knowledge. Intuitively, by this definition, at 
(r, t) i knows ipi&if) holds at all possible points (s, t') that i cannot distinguish from 
(r,t). 

Definition 7.2 (Knowledge). Let 7 be a context, let R C 1Z 1 and let i G I 7 . 

1. We partition Qr into equivalence classes according to the state of i, s.t. p,q G 
Qr are in the same equivalence class iff the state of i is the same in p and in 
q. In a shared-clock model, we additionally demand that the time be the same 
at p and at q. For p G Qr, we denote the equivalence class of p by Si{p). 

2. Define 

Ki : Fr-^ JFr 

iP^{ P en R \ Si{ P ) c if;}. 



While both definitions, of Si and of Ki, depend on R, we omit R from these nota- 
tions, for readability, as the set of runs will be clear from the discussion. We follow 
this convention when presenting some other definitions in this, and in the following, 
chapter as well. 

We now present a few immediate (and well-known) properties of the knowledge 
operator. The first one, sometimes referred to as the "Truth Axiom for Knowledge", 
intuitively means that "whenever anyone knows something, then it is true". The 
second property, sometimes referred to as the "Positive Introspection Axiom" , which 
intuitively means "whenever i knows something, then % knows that it knows it" , has 
been the subject of quite a few philosophically discussions. As we have done when 
presenting the definition for knowledge, and as we will continue to do below, we 
present it, and avoid discussing any philosophical consequences thereof. 



Remark 7.3. Let 7 be a context, let R C 7£ 7 and let i G I 7 . By Definition 7.2, the 
knowledge operator Ki satisfies: 
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Truth Axiom for Knowledge: Ki(if>) C if), for every event if> £ Fr- 

Positive Introspection Axiom: Ki(Ki(if))) = Ki(ip), for every event if) e J-r. 

Monotonicity: if) C =>• K^if)) C Ki((p), for every two events if),(f> G J-r. 

Ifj commutes with intersection: Ki(r\\P) = f){Ki(if)) \ if) e /or every set 
o/ events W C J 7 ^. 



We now build upon Definition 7J2 and define the notion of "everybody knows" . 

Definition 7.4. Let ^ be a context, let R C 7£ 7 and Zet / C I 7 6e a set o/ agents. 
Define 

Ei : J 7 /?, — > Jr 



A truth axiom, analogous to the one presented in Remark 7.3, readily holds for 
Ei as well. In addition, Ej is monotone and commutes with intersection. However, 
it is not idempotent. 

We are now ready to define common knowledge. One classic, constructive defi- 
nition of common knowledge [12] is the following, defining that an event is common 
knowledge to a set of agents when all know it, all know that all know it, etc. 

Definition 7.5 (Common Knowledge). Let 7 be a context, let R C TZ 1 and let 
iCly. Define 

Ci : JFr — > J-r 



if)^ Pl^W, 



n=l 



where (VO = ip and Efty) = E I (E I n ^ L (ifj)) for every n e N. 

It may be readily verified that the common knowledge operator satisfies the 
obvious analogues of all properties of the knowledge operator that are presented in 



Remark 7.3 (including idempotenc 

A classic result [11] regarding common knowledge is that it relates tightly to 
simultaneous response, in the sense that e.g. in order to coordinate a simultaneous 
response among a set of agents, they must all have common knowledge of the 



* In fact, Cj is the (coordinate-wise) greatest idempotent operator s.t. Cj C Ej. 
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response when it occurs. Conversely, whenever common knowledge of a fact arises 



among a set of agents, it does so simultaneously for all agents. Definition 7.9 and 



Theorem 7.10 below formalize this intuition, but before we present them, we turn 
to a few more definitions. 



As noted above, the truth axiom for knowledge, presented in Remark 7.3 



im- 



plies that whenever some fact is known to someone, the fact is true as well. Certain 
events, such as, for some agent i, "z is responding (right now)", have the converse 
property as well, i.e. they are known to i whenever they hold. The following defini- 
tion characterises such events. 

Definition 7.6 (Local Event). Let 7 be a context, let R C 7£ 7 and let i e I 7 . An 

event if) G Tr is said to be "local" to i if Ki(if)) = if). 



Remark 7.7. By the positive introspection axiom presented in Remark 7.3, Ki(ip) 
is local to i, for every i 6 I 7 and for every ip G J-r. 

An important property of events that are local to i, for some agent % G I 7 , is 
that i may act upon them, i.e. the response logic of i in a protocol may be defined 
by specifying that % should respond whenever some given local event for % holds. 
(i may do that, as locality of this event guarantees that whether it holds or not 
at some time t G T is determined by the state of % at t.) As we are interested in 
coordination, though, we are usually interested in specifying a joint response logic 
for a set of agents / C I 7 , i.e. a response logic for each i G /, in which the response 
times of the various agents are coordinated in some way. One way to specify such a 
joint response logic, therefore, is to specify, for each i G I, a local event for %. Such 
a collection of specifications is called an "ensemble" . 

Definition 7.8 (Event Ensemble). Let 7 be a context, let R C TZ 1 and let I C I 7 . 
An I -tuple of events e = (ej) ie / G Tr 1 is called an ensemble if e, is local to i for 
each i G I. 

It should be noted, though, that ensembles are useful beyond specifying response 
logics, as they may be used to study the coordination of passive events as well, i.e. 
coordination of times at which agents become aware of some fact, or at which they 
observe an event (e.g. receive some message). 

We are now ready to survey the results of [H] relating common knowledge and 
simultaneity, as formulated for ensembles in [TTj, Section 11.6]. While phrasing 
the following theorem, and henceforth, we use the following shorthand notation: 
U£ = U ie i&, for every £ = £ i6i G Fr 1 . 
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Definition 7.9 (Perfect Coordination). Let 7 be a context, let R C H, 1 and let 

I C Ly. An ensemble e G J 7 /? 7 2s said to be "perfectly coordinated" if = e, /or 
every z, j G /. 

Theorem 7.10. Let j be a context, let R C 7£ 7 and /ei I C I 7 . 

1. For ever?/ event t/ie ensemble (Ki(Ci(ip)))i(zi is perfectly coordinated. 

2. If e G a perfectly coordinated ensemble, then C Kj(C7(Ue)) /or 
every i £ I. 

3. If e G J-ji a perfectly coordinated ensemble, then Ue C C7(Ue). 

In Chapter [8j we show that the analysis of Chapter [6] has led us, in a sense, to 
a definition that is similar to Definition 17.51 

7.1.2 Fixed-Point Analysis 

Another classic definition [TH] for common knowledge, which is known to be equiv- 
alent, is the following, defining it as the greatest fixed point of a function on J 7 /?. 

Theorem 7.11 (Common Knowledge as a Greatest Fixed Point). Let 7 be a con- 
text, let R C 7£ 7 and let I C I 7 . Cj(tp) is the greatest fixed point of the function 
x 1— >■ Ei(%j) n x), for every event ip G J-r. 

Based on this definition, Moses and Halpern[T3] defined two variants of Common 
Knowledge, matching two weaker forms of coordination. We now present their 
results, as formulated for ensembles in [TU Section 11.6]. 

Definition 7.12 (Eventual Coordination). Let 7 be a context, let R C 7£ 7 and let 

I C I 7 . An ensemble e G Tr 1 is said to be "eventually coordinated" if for every 
i,j G / and for every (r,t) G e^, there exists if G T s.t. (r,t f ) G e^. 

Definition 7.13. Let 7 be a context and let R C TZ 1 . Define 

❖ : -Fjj -> Tr 

^^{(r,t)ef2 R \Bt' GT:(r,Oe^}0 

is the event "tp eventually holds at some time during the current run, be it 
past, present or future. ") 

* We use the symbol <0> instead of the standard temporal logic notation O, in order to emphasize 
that t' may be smaller than t. 
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Theorem 7.14. Let 7 be a context, let R C 1Z 1 and let I C I 7 . 

1. For ever?/ ^ G Fr, the function x >-)■ flj e / <§> (Ki(ip fl x)) /ias a greatest fixed 
point. Denote it by Cf{ip) ("eventual common knowledge" of ip by I). 

2. For every event ip, the ensemble (Ki(Cf is eventually coordinated. 

3. If e G J-r 1 is an eventually coordinated ensemble, then e^ C K~i(Cf(Ue)) for 
every i G I . 

4- If e G J-r 1 is an eventually coordinated ensemble, then Ue C Cf(Ue). 

Another variant of common knowledge, also defined and studied by Halpern and 
Moses, relates to an approximation of perfect coordination. 

Definition 7.15 (e-Coordination). Let 7 be a context, let R C 1Z^, let I C I 7 and 
let e > 0. An ensemble e G Fr 7 is said to be "e -coordinated" if for every i G / and 
for every (r,t) G e i; there exists an interval T C T 0/ length at most e, s.t. t G T 
and s.t. /or ei>en/ j £ I t/iere exzsfo £' G T s.t (r, t') G e^-. 

We note that 0-coordination is the same as perfect coordination, and thus the 



following theorem also implies Theorem 7.10 as a special case thereof. 



Theorem 7.16. Let 7 be a context, let R C TZ^, let e > and let I C I 7 . Define 

Ej : Tr — > Fr 

i/j H> < (r, t) G 



t G T & sup{T - T} < £ & 
3T C T : 1 



ViEl3t' eT: (r,f) G 1^(V>) 

1. For ei>en/ ^ G Fr ; t/ie function x H- F|(^! fl x)) has a greatest fixed point. 
Denote it by Cj(ip) ( u e-common knowledge" of by I). 

2. For every event ip, the ensemble (-fT^Cf (■?/>) is e- coordinated. 

3. If e G J-r 1 is an e -coordinated ensemble, then e^ C Ki(Cj(Ue)) for every 
i G /. 

4- If e G J-r 1 is an e-coordinated ensemble, then Ue C Cf(Ue). 
The attentive reader may notice, by now, a pattern forming in the similarity 



between Definition 7.9 and the function defined in Theorem 7.11 between Defini- 
tion [7!T2] and the function defined in Theorem 17. 141 and between Definition 17.151 and 
the function defined in Theorem 17.161 
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7.2 6-Common Knowledge 

Having completed our survey of some previous, relevant, results and definitions, we 
are now ready to start extending them. Recall that the interdependencies between 
the response times of different agents in the timely-coordinated response problem are 
captured by an implementation-spec (J, 5), i.e. a set of agents I and a constraining 
function 5 : I 2 — > A from ordered pairs of distinct agents, to maximum allowed time 
differences. Before we turn to analyze the timely-coordinated response problem in 
the next section, we first define a form of coordination exhibiting similar constraints, 
and analyze it. 

Definition 7.17 (5-Coordination). We call a quadruplet (^y,R,I,5) a u b-coor- 
dination-spec'^ if 7 is a context, R C TZ^ is a set of runs, and (1,5) is an 
implementation- spec s.t. I C I 7 . Given a 5- coordination- spec (7, R, I, 8), we say 
that an ensemble e G J-'r 1 is "5 -coordinated" if for every (i,j) G I 2 and for every 
(r,t) G ej ; there exists t' G T s.t. t' <t + S(i,j) and (r,t') G ej. 

It should be noted that from this point on, whenever dealing with coordinated 
ensembles, we always assume, for ease of presentation, that |/| > 1, i.e. that the 
ensemble is defined over more than a single agent. Adjusting our results for the 
case in which this does not hold is neither hard, nor interesting. 

Before we commence our analysis of 5-coordination, we define, given an event 
ip G Fr-i notation standing for the event a ip holds at some (past, present, or future) 
time, no later than e time units from now" . 

Definition 7.18. Let 7 be a context, let R C 7£ 7 and let e G A. We define 

®- £ :F R ^F R 

ip H> {(r, t) G Q R I 3 1! C T : t! < t + e k (r,t') G 

Remark 7.19. By Definition \7. 18 : 

• = <§>. 

* Note the difference between the itaiic S that indicates a specific constraining function, and the 
roman (i.e. upright) 6 that generally refers to the form of coordination that we define, regardless 
of any concrete constraining function. For example, (5-coordination, for a specific constraining 
function 5, is an instance of 5-coordination. 

§ As with our usage of <§>, we use the symbol ® instead of the standard temporal logic notation 
O, in order to emphasize that t' may be smaller than t. 
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• ©- 00 (if)) = 0, for every if) G Tr. 

• ®-(if>), for an event if) G J-'r, means "if) has occurred, either now or in the 
past". 

• Additivity: ®- £l (®- £2 (if))) = @- £l+£2 (ip) for every ei,e 2 G A\ {—00} and for 
every event if) G F R . 

• Monotonicity: [e\ < E2 & if) Q (f>) =>■ @- £l (if)) C ®- £2 (</>), /or ever?/ 
Ei, 62 G Z\ and /or even/ £u>o events ip,(f> G J 7 /?. 

• ®- £ (ri!f r ) C f > |{®- e ('?/;) I ^ G for every e E A and for every set of events 

We are now ready to analyze 5-coordination along the lines of the results sur- 
veyed in the previous section. First, we define a common-knowledge analogue for 
this case. As in the results presented in the previous section, given an event if) G J-'r, 
we use if> to define a function fi, s.t. knowledge of the greatest fixed point of f^ 
by each agent constitutes a (^-coordinated ensemble with several desired properties. 
Nonetheless, we face several additional technical challenges along the way. A main 
technical challenge is that 6-coordination lacks the symmetry among the different 
agents in I, which manifests in the common knowledge variants presented in the 
previous section. Thus, in general there is no natural way to define a single event 
if> for which (Ki(if))) ie i is the ensemble we are looking for, i.e. our ensemble should 
be defined in terms of knowledge of different events for different agents. For this 
reason, we somewhat generalize our strategy: Instead of searching for a fixed point 
of a function on J-'r, we define a function on Tr — the set of /-tuples of events. 
We denote the greatest fixed point of this function by Cf(ip) (this is an /-tuple of 
events), and show that (Ki(Cf(ip)i))i £ i is the desired ensemble, i.e. each coordinate 
of this fixed point is the event that i G / should know in this ensemble^ To our 
knowledge, such a technique was never utilized in this field before. 

Before we define the above-described function, we define a lattice structure on 
J-'r 1 , which gives precise meaning to the concept of a greatest fixed point of a 
function on Tr . 

• While vectorial fixed points may alternatively be captured by nested fixed points Chapter 
1] , in our case we argue that the vectorial representation better parallels the underlying intuition. 
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Definition 7.20 (Lattice Structure on Tr 1 ). Let 7 be a context, let R C 7£ 7 and 

let I C Ey. W/e define the following lattice structure on Tr : (In the following 
definitions, tp = {(fi) ie i E Tr and I = (£;) i6 i E Tr 1 .) 

1. Order: (p < £ iff Vz E I : pi C £j. 

2. Jom: <^V£ = (^U(j) i6 7. 

5. Meet: pA£ = (^n&) ieJ . 

Remark 7.21. J 7 //, u>it/i i/ie lattice structure defined above, constitutes a complete 
lattice, i.e. every subset of Tr 1 has both a supremum and an infimum. 

Now, for every ip E Tr, we turn to define the function on Tr 1 , whose greatest 
fixed point we denote by Cf(ip). 

Definition 7.22 (6-Common Knowledge). Let (7, R, I, 5) be a 8- coordination- spec. 
For each ip E Tr, we define 

fijj '■ Tr 1 — > Tr 1 

and denote its greatest fixed point by Cf(ip) ("5-common knowledge" of ip by I). 

We now show that Cf(ip) is well defined. Furthermore, we prove some basic 
properties of Cj{ip), as well as of Cf, which constitutes a function from events 
ip E Tr to /-tuples of events p E Tr 1 . 

Lemma 7.23. Let (7, R, I, 5) be a 6- coordination- spec and let ip E Tr. 

1. Cf{ip) is well defined, i.e. f^ has a greatest fixed point. 

2. Let I E Tr 1 . If I < 4(£) ; then f < Cj{ip). 

3. Cf is monotone: ip Q 4> =^ Cf(ip) < Cf((p) for every two events ip,(p E Tr. 

* This definition may be usefully generalized by allowing ip to depend on j and even on i as 
well. Our results concerning this generalization are outside the scope of this work. 
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Proof. By monotonicity of Ki for every % G I 7 and by monotonicity of ®- e for every 
e £ A, we obtain that fi is monotone. By Remark 7.21, and by Tarski's fixed 



point theorem [22], the set of fixed points of ft has a greatest element, which equals 
\f{£ £ Fr 1 I £ < /$(£)}. This proves the first two parts of the lemma. 

To prove monotonicity of Cf, let ip,(f) £ Tr s.t. ip C 0. Once again, by mono- 
tonicity of Ki for every i G I 7 and by monotonicity of ®- e for every e £ A, we 
obtain that /^(<^) < /|(y?) for every (p G J-r 7 . By substituting <y? = Cf (0), and by 
definition of Cf, we obtain: Cf(ip) = f^Cf (ip)) < f^Cf^)). By directly applying 
the second part of the lemma, we obtain that Cf(ip) < Cf((f>). □ 



It is now time to prove an equivalent of Theorems 7.10, 7.14 and 7.16, for 
5-common knowledge. 

Theorem 7.24. Let ( / y,R,I,5) be a b- coordination-spec. 

1. For every event ip, the ensemble (Ki(Cf(xjj)i))i^i is 5 -coordinated. 

2. Ife£ Tr 1 is a 5-coordinated ensemble, then e^ C Ki(Cf (Ue)j) for every i £ I . 

3. If e G J-r 1 is a 5-coordinated ensemble, then Ue C UCf(Ue). 



7.7 



- A 

e = 



Proof. We begin the proof of the first part by noting that by Remark 
(Ki(C 5 j((il))i))i & i is indeed an ensemble for /. Let (i,j) G I 2 and let (r, t) G e^. By 
definition of e^ and by the truth axiom for knowledge, (r, t) G Cf(ip)i. By definition 
of Cf, 

c?(V0< = f| ®^' k \K k ^ n e fc )) C ®^\K^ n e,)). 
kei\{i} 

Thus, we obtain (r, t) C @- s( - l '^(Kj(ip fl e^)). By definition of ©^W), there exists 
t' G T s.t. t' < t + S(i,j) and (r, t') G -Kj^ H e^). By monotonicity of Kj and by 
locality of ej to j, we obtain (r,f) G Kj(ej) = ej, and the proof of the first part is 
complete]^] 

We move on to proving the second part. Let e be as defined in this part of the 
theorem. First, we show that e < /u g (^)- Let i £ I. Let (r, t) £ ej and let j £ I\{i}. 
Since e is 5-coordinated, there exists t' G T s.t. t' < t + S(i,j) and (r, t') £ ej. 



* The attentive reader may notice a conceptual similarity between the above argument and 
the proof of Corollary |6.35| Furthermore, as noted there, this similarly extends to the second part 
of the proof of Lemma I5.7I as well. 
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By definition of an ensemble, ej is local to j, and thus ej = Kj(ej). Therefore, 
(r,f) E Kjfe). By definition of ®^ 5 ^\ we obtain (r,t) E ©-^^(^(e^)). Thus, 

e, C f) ©^(^(e,)) = p| ®^)(^.((Ue) n e,)) = /^(e), 



By the second part of Lemma 7.23, we thus have e < Cf(Ue). For every i E /, by 
monotonicity of -fQ we obtain Ki(ei) C i^j(C|(Ue)j), and by locality of to i, we 



complete the proof of the second part of Theorem 7.24, as = Ki(ei). Let i E I. 
As we have just shown that C Cj (Ue)j, we also have C UC|(Ue). As this holds 
for every i E I, and as the r.h.s. does not depend on i, we obtain Ue C UCf(Ue), 
completing the third, and last, part of the proof. □ 



Theorem 7.24 which we have just proved, provides us with some key properties 
of ^-common knowledge: The first part of the theorem says that the ensemble 
defined by it is 5-coordinated. The second part says that regardless of the way a 
5-coordinated ensemble is formed (be it using 5-common knowledge of some event 
if), or otherwise), the fact that its i'th coordinate holds implies that % knows the 
z'th coordinate of 5-common knowledge of (the disjunction of) this ensemble. The 
third part, similarly, says that in this case the fact that any coordinate of such an 
ensemble holds implies that at least one coordinate of 5-common knowledge of (the 
disjunction of) this ensemble holds. 



While Theorem |7.24| does indeed provide us with several key properties of 
6-common knowledge, a second, deeper look at this theorem (resp. at its ana- 
logues from [TU Section 11.6] surveyed in the previous section) reveals that it does 
not characterise 6-common knowledge (resp. common knowledge, eventual common 
knowledge, or e-common knowledge). Indeed, this theorem (resp. all its analogues) 
would still hold if we defined each coordinate of 6-common knowledge (resp. com- 
mon knowledge, eventual common knowledge, or e-common knowledge) simply as 
i.e. the event "True". 

We remark that it may be verified that the ensemble defined by common knowl- 
edge of an event ip is the greatest perfectly coordinated ensemble e satisfying 
Ue C ^0 Similarly, we remark without a proof (as a proof would be similar to 



* Greatest, here, is in the sense of the lattice structure defined in Definition 7.20 In particular, 
this characterisation implies that such a greatest ensemble exists. This characterisation of the 
ensemble defined by common knowledge is an immediate consequence of Aumann's definition[3] 
of common knowledge, which may be rephrased as follows: Ci(tp), for ICI 7 and ijj € J-r, is the 
greatest event cf> C tp that is local to each i E I. 
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that of Claim 7.27 below) that it may be verified that the ensemble defined by 
eventual common knowledge of an event of the form <#>(■?/>) is the greatest eventually- 
coordinated ensemble e satisfying Ue C <§>(ip). Analogous characterisations, for the 
ensembles defined by e-common knowledge and by 6-common knowledge, are, how- 
ever, more elusive to phrase (as is an analogous characterisation of the ensemble 
defined by eventual-common knowledge of an arbitrary event.) For this reason, 
we now only characterise the ensemble defined by 5-common knowledge of events 
that we call "atemporal" . (It may be readily verified, along the same lines, that 
an analogous characterisation for the ensemble defined by e-common knowledge of 
an atemporal event holds as well.) While this characterisation is similar to that 
of the ensemble defined by eventual-common knowledge, which we phrased above, 
it is not analogous in that it conceptually does a significantly less adequate job 
in capturing the essence of 6-common knowledge (and of e-common knowledge). 
Nonetheless, this characterisation suffices for our analysis of the timely-coordinated 
response problem in the next section. 

Definition 7.25 (Atemporal Event). Let 7 be a context and let R C 7£ 7 . We call 
an event if) £ J-r "atemporal" if if) holding at some time during a run implies that 
it holds at all times throughout that run. Formally, if) is atemporal iff it is of the 
form R' x T for some R' C R. 



Remark 7.26. By Definition \7.25 



if) is atemporal iff if) = ®(ifi). 



By Remark 7.19 (additivity), <§> = ®-°° is idempotent. Thus, ®(tp) is atem- 



poral for every if) £ Tr. 

We conclude this section with the following claim, which, together with Re- 
mark 7.26[ provides a characterisation of the ensemble defined by 5-common knowl- 



edge of an atemporal event if}: It is the greatest 5-coordinated ensemble e satisfying 
Ue C if>. (In the next section, we conclude that this characterisation holds also 
for the ensemble defined by 5-common knowledge of a temporal event of the form 
®-°(e), where e is an ND event.) 

Claim 7.27. Let (j,R,I,8) be a 5- coordination-spec, let if) £ J 7 ^ and let e £ J-'r 1 

be the ensemble defined by e^ = K~i(Cj(ip)i) for every i E I . 

1. e' < e, for every 5-coordinated ensemble e' £ T R satisfying Ue' C if). 
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2. Ue C <&(i/j). (In particular, for atemporal if), by Remark 7.26, Ue C ip.) 



Proof. We begin by proving the first part. We have 



e' C 



C KiiC'iUe').) C 



by the second part of Theorem 7.24 



by monotonicity of Ki and of C\ 
by definition of 



as required. 

To prove the second part, let i E J and let j G I \ {i}. By monotonicity of 



by definition of Cf 
by monotonicity of Kj 
by the truth axiom for knowledge 



c (^(^)) c 
c (^) c 

c ^ (^). 



By monotonicity of .fT, and by the truth axiom for knowledge, we obtain that 
Gi C ^(^(-0)) C <#>(?/'), completing the proof of the second part. □ 



by Remark 7.19 (monotonicity) 



7.3 Analyzing Timely-Coordinated Response 

We now relate the machinery developed in the previous section to the timely- 
coordinated response problem. We begin by formally introducing external inputs as 
events in J 7 ^, and by formalizing the relationship between ND events and knowledge. 

Definition 7.28. Given a context 7 and an external input e G E 7 , we formally 
associate e with the event "e is occurring (right now)", i.e. with the set of all points 
at which e occurs. 

Remark 7.29. As noted in Chapter^ since e is an ND event, it cannot be foreseen 
(i.e. known to occur) by any agent before it occurs. In the notation of this chapter, 
this may be formalized as follows: Ki(®(e)) C ®-°(e) for every i G I 7 . (This follows 
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straight from applying Claim 6.21 to the first part of Remark 6.26, at tgj^p 
Corollary 7.30. Let 7 be a context and let e G E y . 

1. Ki(<®>(e)) = Ki(@-°(e)), for every i G I 7 . 

2. Let I C I 7 and let e G J 7 // 6e an ensemble. If Lie C <0>(e), i/ien Ue C ®-°(e). 



Proof. Let i 6 I 7 . By Remark 7.19 (monotonicity) and by monotonicity of Ki, 
we have ifj(®-°(e)) C i£j(^(e)). Conversely, by the positive introspection axiom, 



by monotonicity of Ki and by Remark 7.29, we have Ki(<§>(e)) = Ki(Ki(<§>(e))) C 
i^i(®-°(e)), and the proof of the first part is complete. 

To prove the second part, let % G I. By locality of ej and by monotonicity of Ki, 
we have e» = iQ(ej) C i£j(^(e)). By Remark 7.29, the proof is complete. □ 



We conclude this chapter by applying the machinery developed throughout it to 
obtain an optimal response logic for the timely-coordinated response problem. 

Corollary 7.31. Let (7, e, L, 8) be a TCR-spec. An optimal response logic for solv- 
ing TCR y (e,I,5) is, for every i G I: "respond when K^Cf (®-°(e))j) holds for the 
first time". 

Proof. Assume that TCi? 7 (e, J, 5) is solvable and let P G TCi? 7 (e, 1,6). W.l.o.g., 
P is a full-information protocol^ For every i G /, define r» G J-r^(p) as the set of all 
points at which % responds according to P. Since P is a full-information protocol, 
the actions (and in particular, the responses) of each agent % G I at each time £ G T 
may be deduced from its state at £. Therefore, r is an ensemble. In addition, define 
an ensemble e G (p) 1 by = K~i(Cf (®-° '(e))j) . (This is indeed an ensemble, by 



Remark 7.7, and thus i may indeed respond according to it.' 



* For the continuous time model presented in AppendixjXJ our analyses from both this and the 
previous chapter depend, through Claim |6.27[ on the "no foresight" property. The dependence 
of the analysis of this chapter on it, though, is not fund ament al, in the sense that it may be 
readily dropped by replacing ®-°(e) with <0>(e) in Corollary 7.31 (In contrast, it is not clear that 



the results of the previous chapter may be easily modified to hold in the absence this property.) 
Moreover, unlike the analysis of the previous chapter, which heavily relies on the "no extrasensory 
perception" property of the continuous-time model, the analysis of this chapter does not rely on 
it at all. (This is not surprising given the fact that this analysis is agnostic to the methods of 
information gain by agents. Indeed, not even once do we mention messages in this analysis.) These 
are both examples of the ability of the higher-level approach of this chapter to mask the details 
of the model in question by phrasing its results in terms of knowledge. (The meaning that the 
knowledge operator takes on in a specific model, though, depends of course on such properties.) 
§ A much weaker assumption regarding P suffices as well, actually. 
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We first prove the optimality of responding according to e. Let i <E I. We have 
to show that for every r G R^(P), i would respond in r, according to the response 
logic defined above, no later than t r (i) (the response time of % in r according to P). 
Formally, this amounts to showing that C ®-°(ej). Since P G TCR 1 (e,I,S), we 



have Ur C <#>(e) and by the second part of Corollary 7.30, Ur C ®- (e). Thus, by 



the first part of Claim 7.27, r < e. (This may seem like a slightly stronger statement 



than the required Vz G / : C ®-°(ej), however, we will show in Corollary 8.8 that 



these are in fact equivalent for full-information protocols.) 

We now prove that responding according to e solves TCi? 7 (e, /, 6). By the first 



part of Theorem 7.24 , e is 5-coordinated. Let i E I. Correctness of P implies that 
rj holds at some time along any r G R^(P). Using the notation of this chapter, 
this is formulated as <@>(e) C <@>(rj). Therefore, by the first part of this proof and 
by monotonicity of we obtain <§>(e) C <#>(ej) as well. To complete the proof, 



we note that by the second part of Claim 7.27 and by Remark 7.19 (additivity), 
■ -°(e)) = ^(e), i.e. e occurs at some time along every run during which 

□ 



Ue C 



any coordinate of e holdsQ 



By Corollary 7.30 we have Ue C ®-°(e) as well, explaining our previous statement that 



Corollary 7.30 proves Remark 4.2 



Chapter 8 



The Equivalence of Both 
Approaches 



Corollaries 6.35 and |7.3l| both present optimal response logics for solving the timely- 



coordinated response problem presented in Chapter |4j An obvious consequence is 
that the response logics defined in both corollaries must somehow be equivalent, 
at least for full-information protocols, which are assumed in our proofs of these 
corollaries^ and in a shared-clock model, which is assumed in our proof of Corol- 
lary |6.35| In the next chapter, we apply our results from the previous chapters 
to obtain specialized, somewhat more practical, versions of these results for some 
naturally-occurring models. However, before starting to do so, we prove the equiv- 
alence of Corollaries 16.351 and 17.311 in a somewhat more constructive manner in this 
chapter, which also sheds some more light on the fixed-point analysis of the pre- 
vious chapter, and makes the notion of 5-common knowledge more concrete. Our 
aim is to prove the following result, by searching for a more constructive (yet equiv- 
alent) definition of 5-common-knowledge, along the lines of the nested-knowledge 



definition of common knowledge given in Definition 7.5, rather than those of its 



fixed-point definition given in Theorem 7.11 



Theorem 8.1. In a shared-clock model, let (7, e, 1, 8) be a TCR-spec s.t. 
TCR-y(e, 1,5) is solvable. The response logics for TCR^ie, 1,5) defined in Corol- 



laries 6.35 and 7.31 are equivalent when applied to full-information protocols, i.e. 
these two response logics yield the exact same responses at the same times in each 
run. 



* The attentive reader may also notice some similarity in the way the second part of the proof 
of each of these corollaries makes use of its first part. 
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In order to prove Theorem |8.1 we perform an analysis of 6-common knowledge 
of events of the form ®-°(e) in full- information protocols. To make our analysis 
somewhat cleaner and more generic, we first aim to formally capture the properties 
of such protocols and of events of the form ®-°(e), which are of interest to us. 



8.1 Background 

In this section, we review two definitions and some basic properties thereof, from 
[TTJ Chapter 4]. We rephrase these to match the notation we have introduced so 
far. 

Definition 8.2 (Stability). Let 7 be a context and let R C TZ 1 . An event if) £ is 
said to be "stable" if once if) holds at some time during a run, it continues to hold for 
the duration of that run. Formally, using our notation, if) is stable iff if) = ®-°(if>). 

Remark 8.3. By Definition \8.S\ - 

• By Remark 7.1£\ (additivity), ®-° is idempotent. Thus, is a stable 



event for every if) £ F R . 

• if) n<f> is a stable event for every two stable events if),<f> £ J-r. 

Indeed, the property of ®-°(e) that we utilize in this chapter is its stability. We 
now present the second definition based upon [Tlj Chapter 4], which we utilize in 
this chapter. 

Definition 8.4 (Perfect Recall). Let 7 be a context. A set of runs R C H 1 is said 
to exhibit "perfect recall" if for every r e R, for every i 6 I 7 and for every t,t' £ T 
s.t. t' < t, the state of i at t in r uniquely determines the state of i at t' in r. 



Remark 8.5. R~,{P) exhibits perfect recall for every full-information protocol 
We now distill the property of full-information protocols that is of interest to 



P £ P 7 . 



us, namely that in sets of runs that exhibit perfect recall (and thus, by Remark 8.5 
also in full-information protocols), knowledge of a stable event is itself stable. The 
following is given in (TTJ Exercise 4.18(b)], and its proof follows directly from the 
definitions of stability and of knowledge. 

Claim 8.6. Let 7 be a context, let R C 7£ 7 be a set of runs exhibiting perfect recall 
and let if) £ Fr. If if) is stable, then Ki(if)) is stable as well, for every i £ I 7 . 
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Returning to our results and working toward proving Theorem 8T, we first derive 
a stability property for 6-common knowledge. 

Claim 8.7. Let (7, -R, /, 5) be a 5 -coordination- spec. For every if) G Tr, all coordi- 
nates ofCj(ip) are stable. 

Proof. Let i G I. By Definition 7.18, it is enough to show that ®-°(Cj (if>)i) Q 
Cj(ip)i. Indeed, we have 



by definition of Cf 



® 



<o 



n®- 5(ij) (^(^ncf(^)) c 



by Remark 7.19 



c n®- (®- ,(w) ( 1 0(^ncf(^) i ))) 
= n®-' (y, ( jr i(V'ncJ(^) i )) = 

= C7f(V») 4 . 



by Remark 7.19 (additivity) 



by definition of Cf 



□ 



It should be noted that stability of 6-common knowledge, as guaranteed by 



Claim 8.7, does not generally guarantee stability of the ensemble defined by it in 



the first part of Theorem |7.24| Nonetheless, combining Claims 8J3 and 8.7[ we 
obtain stability of this ensemble in the presence of perfect recall. 

Corollary 8.8. Let (7, R, I, 5) be a 5- coordination- spec s.t. R exhibits perfect recall. 
For every if) G J-'r, all coordinates of the ensemble (Ki(Cf(if))i))i e i are stable. 



Claims [8T6] and |8~7] and the proof of Corollary |7. 3 1 1 lead us to consider, for stable 



if) and given perfect recall, a slightly different definition for fi than the one given 



in Definition 7.22 In order to phrase this definition, we first define, given an event 



if> G J-r, notation standing for the event u if) holds at exactly e time units from now". 

Definition 8.9. Let 7 be a context, let R C r R, 1 and let e G A \ { — 00,00}. We 
define 

® £ : F R -> T R 

ip i->- {(r,t) G Or I (r,t + e) eij)}Q 



* Once again, we use the symbol ® instead of the standard temporal logic notation O, in order 
to emphasize that e may be nonpositive. 
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Remark 8.10. By Definition \8.S\ for every event if) G J-r we have: 

• ® £l (®- £2 (^)) = ®- £l (® £2 0)) = ®- £l+£2 (^), for every e 1 ,e 2 G A \ {-oo, oo}. 

• © £ (ip) C @- £ {ip), for every e G A\ {— oo, oo}. 

• ® £ commutes with intersection for every e G A\ {— oo,oo}: © e (r\\P) = 
f > |{© £ ('?/>) | ip G \F} for every set of events \P C Tr. 

We now present our slightly modified definition of /i, which differs from the 
definition of given in Definition 



7.22 



by the use of instead of @^ s ^\ and 

by intersecting with instead of intersecting over eventual knowledge require- 

ment sJ3 

Definition 8.11. Let (7, R, I, 5) be a 8 -coordination- spec s.t. 5 > —00. For each 
ip G J-r, we define 



4 : JFr 1 -> JFr 1 

( \ 



[Xi)iei ^ 



V 



J 



and denote its greatest fixed point by Cj(ip). 



Using an argument completely analogous to the proof of Lemma 7.23, it may 
be shown that Cj(ip) is well defined. Furthermore, the same argument shows 
that Cj(tp) also satisfies the obvious analogues of the second and third parts of 
Lemma 



7.23 



with regard to gt- 

We now present a key observation, which stands at the heart of our proof of 
While, even in full-information protocols and when ip is stable, 7^ 



Theorem 



f^ (e.g. when applied to certain unstable events), it so happens that under certain 
conditions, the greatest fixed points of both of these functions coincide. 

Lemma 8.12. Let ( / ~f,R,I,5) be a 8 -coordination- spec s.t. R exhibits perfect recall 
and s.t. 5 > —00, and let ip G Tr. If ip is stable, and if C $(Cf(if})i) for 

every i t J, then £/(V0 = Cfty). 



* The intersection with G(ip) has any effect only if the intersection following it is empty. 
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Proofs >: Let z € L By Claim 8.7, C?0)j is stable for every j E /. Since ip is 
stable as well, Remark 8.3 yields that ip PI Cf(ip)j is stable for every j E /. We also 



note that for every j E I\{i}, by the truth axiom for knowledge and by Remark 7.19 
(monotonicity) , we have 



5.r 



Thus, we obtain 

= fl @ ^)(ir,(^ncfw,)) = 

= ^ W n fl ®^ S(i ' j \K 3 (iij n cf c 

c ♦ n Pi @&to\KjU; n cf (^)) = 

<5(iJ)<oo 



by definition of Cf 



by (8.1) 



intersecting over fewer events 



by Remark 8.10 



❖ (V) n p| ©^(©^(^ n C^j))) 

je/\{i} 

<5(«j)<oo 

♦ ty)n P|®' (y) ( A i(^ nC ?(V')i)) = 

<5(i,j')<oo 



by Claim 8.6 and by 



stability of ^ H Cf (V>)j 



by definition of gr^ 



Thus, by the analogue of the second part of Lemma 7.23 for g!L, we obtain Cf(if)) < 
Cj(ip), as required. 

<: For every i E I, we have 



♦ Wn P|® ,(<J) (W n ^(^))^ 



by definition of £7 



by Remark 8.10 



* It should be noted that we could have saved ourselves some hardship in this proof by replacing 
n_y£j\{j-} . . . with Q(tp) n (f^jei,6(i,j)<oo ■ ■ ■) when defining which would still have allowed us 
to obtain Corollary |7.31[ While this is indeed true, in this case many of our results regarding 
6-common knowledge would have required the additional assumption that 4}(tp) C <®(Cf(ip)i), 
reducing from their generality and usefulness. The added strength of the approach we have 



chosen presents itself both in Corollary 9.16 and while discussing eventual common knowledge in 
Chapter [10 
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c 



Wn f|®^(^-^n^(V)i))c 



as +ty) C ♦(Cf(V)i) 



/ \ 



n 



. ieAW 

\5(iJ)^oo 



C by monotonicity of <#> 



/ 



C 



/ 



V(i,i)=°° 



fl@^)(^(^ncf(^)) 
/ 



n 



n 



\ 



fl®^)(ir,(^n^(^)) 



\(5(ij')^oo 



c 



by Remark 7.19 



/ 



C 



\<5(ij')=oo 



\ 



n®-' (y) (^(^ncj(^)) 

= 00 

/ 



n 



n 



V(ij)^°° 



by monotonicity of ® 
C and of Kj, and by the 
first part of this proof 



C 



/ 



. j'eAW 

\<5(ij')=oo 



\ 



n®-' (y) (^nC7/Wi)) 

/ 



n 



n 



\ 



. jeAtt 

\(5(ij')^oo 



: n @ - 5(M,) (^^ n ^(^)) 

jeAW 



by definition of /i 



Thus, by the second part of Lemma 7.23, we have Cj(ip) < Cf(ip). 



□ 
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One may wonder why we have worked so hard to obtain 5-common knowledge, 
under the conditions of this chapter, as a fixed point of g]L rather than of /i. 
The answer is simple: commutes with the meet operation, while does not. 
(Moreover, as a result, g^ is downward-continuous while f^, even in a discrete-time 



model, is not.) This fact paves our way toward proving Theorem 8.1 



Proof of Theorem \8.1\ Let (j,e,I,5) be a TCR-spec s.t. TCR y (e, 1,5) is solvable, 
and let P G P 7 be a full-information protocol. In this proof, we work in f2nrpy 



Note that by Remark 8.3 



®-°(e) is stable. 



By Remark 4.12, solvability of TCR y {e, 1,5) implies 5 > — oo. Furthermore, as 



shown in the proof of Corollary 7.31, solvability of TCR 1 {e,I,5) implies <§>(e) C 



$(Ki(Cj(@-°(e))i)) for every i e L By Remark |7T9| (additivity), by the truth 
axiom for knowledge and by monotonicity of <§>, we have <§>(®-°(e)) = <§>(e) C 
®(Cf (®-°(e))j) for every i G / as well. Thus, by Remark 8.5 and by Lemma 8.12 
we obtain Cj (®^°(e)) = f/(®^°(e)). 

It is easy to verify that g s @ <o^ commutes with both finite, and infinite, meet. 
Thus, it is downward-continuous and by Kleene's fixed point theorem^ we obtain 

By ® e commuting with intersection for every e G A, and by commuting with 
intersection for every % G /, we thus obtain, for every i G /, that 



/ 



❖ (®^°(e)) n 



p) (^-(©^(e))) 



\<5(«j')<oo 



n 



n 



\8(i,j)<oo 

n • 



\ 



®-°(e)n P ® <5(j ' fc) (^(®-°(e))) 



fceAOI 

<5(j',fc)<oo 



\ 



/ 



n 



* This fixed point theorem seems to be popularly named after Kleene, as the idea of using the 
orbit of an extremal element to obtain a fixed point was first used in his proof of his first recursion 
theorem [l5l p. 348]. For a definition of this theorem that is phrased in terms of lattices, continuity 
and greatest fixed point, see [IB] . 
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(g)n 



\ 



\5(iJ)<oo 



n 



/ 



n 



n 



® 



\5(ij')<oo 



\ 



f| ® s ^ k \K k (®^ (e))) 



. fce/\{i} 

\8(j,k)<oo 



J 



n 



n • • 



♦ (e) n f| ® S ^(K P2 (. ■ ■ (® 5 ^-^(K Pn (®^(e)))) •••))■ 



P6P(G a ) 

Pl=« 

p¥K> 



By Corollary 7.30, Ki(®(ej) = Ki(@-°(e)) and thus, by Ki commuting with 
intersection, we obtain (omitting henceforth some parentheses for readability) 

^(Cfto^e))*) = f]K Pl ® s ^K P2 ---® s ^-^K Pn (®^°(e)). (8.2) 

P£P(G S ) 

Pi =2 



Thus, the response logic from Corollary 7.31 is equivalent, for every i 6 I, to: 
"respond as soon as 



K pi ® s ^^ K P2 ®<W3) . . . K Pn _ x ©^-i.p™) K Pn {®^°(e)) 



(8.3) 



holds for every path p e V(Gg) starting at p\ = i." 

By directly applying the methods of Ben-Zvi and MosesJUl El IE] Q it can be 
seen that since P is a full-information protocol in a shared-clock model, a (p, 5)- 
traversing e-centipede by t e T in a run of P is equivalent to the following holding 
during that run, expressed by means of their absolute-time modal-logic notation 
from [8]: 

#(pi,ti)#(p2,ta) ' ' ' K (Pn,t n )^ (8.4) 

for £fc = t + Lc s ((pm)m=i) f° r every k E [n], and where e is a proposition corre- 
sponding to our ®-°(e) event. 



* Ben-Zvi and Moses show this in a discrete-time model. However, it may be verified that the 
"no foresight" and "no extrasensory perception" properties of the continuous-time model presented 
in Appcndix[X]sufficc in order to adapt their argument, without fundamental change, to this model 
as well. 
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As (8.3) holding at t is a different notation for (8.4), the proof is complete. □ 



We conclude this chapter with an observation. If |/| < oo and if Gs has only triv- 
ial (i.e. singleton) strongly connected components, then there are only finitely many 
paths in G$. In this case, Theorem 6.34| and Corollary 6.35 imply that a timely- 
coordinated response hinges on only finitely many path-traversing centipedes. (This 
is indeed the case for the ordered response and weakly-timed response problems 
studied by Ben-Zvi and Moses, as is shown in Chapter 10 .) This observation may 



seem, at first glance, to clash with the infinite nature of fixed points in general, and 
of greatest fixed points in particular. It is worthwhile to note that what reconciles 
these is that in this case, gt is constant and therefore its value, which is a finite 
intersection of nested-knowledge events, is its only fixed point, and thus its greatest 



fixed point. Furthermore, by Corollary 7.31, solvability of TCi? 7 (e, 1,5) implies 
that <§>(e) C <§>(Cf (®-°(e))) and thus, as noted above, we would still have obtained 
Corollary 7.31 had we defined similarly to gt, but using instead of 



In this case, the function /^' 7 ' would have also been constant, and the above insight 
would have held for it as well. 



Chapter 9 

Results for Practical Models 



The analysis of the timely-coordinated response problem in Chapters [6] and [7] is a 
general one, assuming very little regarding the model in which we work. The ad- 
vantage of such a general analysis is that the results it yields hold for a vast variety 
of models and situations. One disadvantage, which we noted in the discussion con- 
cluding Chapter |6j is that the gap between these results and their consequences for 
practical situations is quite large. In this chapter, we derive, from the general anal- 
ysis of the timely-coordinated response problem from the previous chapters, various 
stronger results for some special, yet naturally-occurring, cases that we introduce 
below. We also discuss some possible practical applications of our observations. 



9.1 Bounded-Syncausal-Path Contexts 



When presenting Theorems 6.12 6.16 and 6.22 above, we noted that the proofs that 



Ben-Zvi and Moses present for them strongly rely on time being modeled discretely. 
It is worthwhile, in this context, to recall the classic "coordinated attack", or "two 
generals", problem [UH3]- This problem describes a hypothetical situation, in which 
two army generals, each camped on top a different hill overlooking some village, wish 
to coordinate a simultaneous attack of this village (i.e. reach common knowledge of 
an attack time that was not agreed upon in advance), by communicating solely via 
messengers. While this problem is unsolvable in a discrete-time modelp], Fagin et 
al.[TT| p. 386] note that even in the lack of any delivery guarantee, the generals may 
successfully coordinate a simultaneous attack if they have access to a messenger 
who can make infinitely many trips between one general's camp and the other's in 
finite time, by doubling her speed each time she reaches one of the camps. 
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In fact, Theorem 6.34| implies that in our continuous-time model, even in the 



absence of any bound guarantee between two disjoint sets of agents J, J (i.e. when 
l{/x j}u{Jxi} = oo), a simultaneous response of two agents i G / and j G J may 
be achieved even if no such "infinite syncausal paths" from e to each agent at the 
time of its response exist, as long as such paths that alternate between these sets of 
agents an arbitrarily large number of times exist F] In the above scenario, this means 
that the generals may also coordinate a simultaneous attack if they have access to 
infinitely many messengers, such that in a finite time frame, for any arbitrarily large 
N G N, there exists a messenger who alternates between their camps at least N 



times. In Corollary 9.16 we formalize the intuition that there are no other ways in 



which these generals may coordinate even an approximately simultaneous attack. 



In order to have any hope of generalizing Theorems 6.12 , 6.16 and 6.22 for the 
timely-coordinated response problem in a continuous-time model, we therefore first 
have to define some restriction that prevents such Zeno-paradoxical situations from 
taking place. By doing so, we effective force the infinitely many associated path- 
traversing centipedes to degenerate to a broom-like, or centibroom-like, structure. 
This intuition is formalized in Definition 19.21 

Definition 9.1. Given a context 7, a run r G 7£ 7 and two agent-time pairs 61,62 G 
I 7 x T, we denote by L r (6i,6 2 ) the supremum of the number of ND events in a 
syncausal path 6\ 6 2 . If 6\ 6 2 , then we define L r (6i, 6 2 ) = 00. 

Definition 9.2 (Bounded-Syncausal-Path Context). We say that a context 7 is a 
"bounded-syncausal-path" context if 6\ ~? 6 2 implies L r (6i,6 2 ) < 00, for every run 
r G IZj and every two agent-time pairs 6 1} 6 2 G I 7 x T. 

Remark 9.3. Some naturally-occurring bounded-syncausal-path contexts include 
contexts with the following properties, which are customarily taken as axioms: 

• Any context in which a universal positive lower bound on all delivery times 
holds, including all contexts of the discrete-time model presented in Chapter^ 

• Any context in which only finitely many messages may be sent ( or rather, may 
be delivered early) in any bounded time frame. 

While, due to the continuous nature of time and to the possibility of infinitely 
many agents, finite-memory and finite-processing-power models need not guarantee 



This is thus also possible in the lack of any delivery guarantee. 
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bounded-syncausal-path contexts (at least when dealing with protocols that are not 
necessarily full-information ones), we show in the next section that many results that 
hold for bounded-syncausal-path contexts, still hold when the memory or processing 
power of each agent is limited. 



We are now ready to generalize Theorems |6 . 1 2| and |6 . 22| and the proofs of Ben-Zvi 
and Moses [HI El E] for these theorems, for the timely-coordinated response problem 
in a continuous-time, yet bounded-syncausal-path, context. The following is, in a 



sense, a converse of Remark 6.36 for such contexts 



Corollary 9.4. Let (7, e, /, 8) be a TCR-spec, let P G TCR^(e,I,5) and let r 6 
R^(P). Let J C I be a finite subset of I that is contained entirely within one 
strongly- connected component ofGg. 

1. If there exists i E J s.t. L r (e,(i,t r (i))) < ooj^] then there exists an event 
e G PND r {i, t r (i)) that is an e- broom for J in r. Furthermore, the horizon of 
this broom may be bounded by a finite bound of the form 

b(t r (i), max(5| J2 ), | J\, L r (e, (i, t r (i)))). 

2. If, in addition, 5\j? is antisymmetric, then the broom guaranteed by the first 



part of this corollary is by (t r (j))j e i, implying the results of Theorems 6.12 



and\6.22 for bounded-syncausal-path contexts in a continuous-time model. 



Proof. Denote n = \J\. The fact that J resides within one strongly-connected 
component of G$ implies 5\j2 < 00, and thus, a Hamiltonian cycle exists in the 
subgraph of Gg induced by J. Let (p±, . . . ,p n ,Pi) be such a cycle, for which 
Pi = i. We now concatenate this cycle to itself enough times to obtain a path 
of I = (n — 1) • L r (e, (i, t r (i))) + 1 vertices, which we denote by 

P = ( Pi, • • • ,Pn 1 Ph ...,p n , pi,... ,Pn,Pl, ■ ■ ■ ,Pk) - 
v ' 

l=(n-l)-L r (e,(i,t r (i)))+l 



By Theorem 6.34, r contains a (p' , <5)-traversing e-centipede by t r (i) - - denote 
it by e = (e m ) l m=1 . By definition, e contains at most L r (e, (i, t r (i))) distinct 
events. Thus, each distinct event contained in e appears in it, on average, at least 
l/L r (e, (i, t r (i))) > n — 1 times. Thus, by the pigeonhole principle, there exists an 



* In particular, this holds for every i e J, if 7 is a bounded-syncausal-path context. 
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event e G PND r (i, t r (i)) that appears in e at least n times. By definition of a path- 
traversing centipede and by antisymmetry of the syncausality relation, these appear- 
ances are consecutive, and thus we obtain that there are n consecutive vertices in p' 
to which there exists a delivery guarantee from e. As any set of n consecutive vertices 
in p' exactly equals J, we obtain that e is an e-broom for J in r by t r {€) + Lg s {p'). 
We complete the proof of the first part of the corollary by bounding this time: 

tr(i) + L Gs (p') < by definition of L Gs 

< t r (i) + (/ — 1) • max(j| j2) = by definition of I 
= t r (i) + (| J\ — 1) • L r (e, (i, t r (i))) ■ max(5|j2) < by finiteness of all elements 

< oo. 



We note that for large L r (e, (i, t r (i))), obtaining the shortest possible p' frequently 
involves choosing a Hamiltonian cycle of minimal length. 

We now move on to proving the second part of the corollary. If <5|j2 is antisym- 
metric, then the length of any p = (p m )m=i e ^ > (^8\ J 2 ) ^ s P rec i se ly 8(Pn) — 8(pi)- 
Therefore, for any r G R^(P), any end node of any (p, 5)-traversing e-centipede by 
t r (px) is of the form (p k , t r (Pi)+^((Pm)m=i) = (p*> tr(p\)+5(jPi,Vk)) = {Pk, t r (Pk), 
and the proof of the second part of the corollary is complete. □ 

An analogous proof gives rise to the following corollary, which generalizes both 



Theorem 6.16 and Corollary 9.4 



Corollary 9.5. Let (j,e,I,5) be a TCR-spec, let P G TCR 7 (e,I,8) and let r G 
R*(P). LetneN and let J = (J m )™ =1 G (2 / ) n be a tuple of finite subsets of I , 
each of which is contained entirely within one strongly- connected component ofGs- 
Assume, furthermore, that no two of these subsets are contained within the same 
strongly- connected component of G$, and that for every m G [n — 1], there exists a 
path from J m to J m +i in Gs- 

1. If there exists i E J\ s.t. L r (e, (i, t r (i))) < ooj^] then there exists an e- 
centibroom for J rev in r, consisting entirely of events from PND r (i,t r (i)). 
Furthermore, the horizon of this centibroom may be bounded by a finite bound 
of the form 

b(U(i), n, (max(5| Jm2 ))^ =1 , (min(5| JmX j m+1 ))^l\, (| J m \)l=i, L r (e, (i, t r (i)))). 



As before, this holds for every i g J\ if 7 is a bounded-syncausal-path context. 
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2. For every m G [n], choose an arbitrary j m G J m . If, in addition to the 
conditions of the previous part, for every m G [n], S\ Jm 2 is antisymmet- 
ric, then the end nodes of the centibroom guaranteed by the first part of 
this corollary are {(j,t r (j)) | j G Ji}, {(j, Uiji) + | j G J 2 }, 

+ S(ji,j 2 ) + Khij)) I 3 e Ji}, etc^\ In particular, this also 



im- 



plies the result of Theorem 6.16 for bounded- syncausal-path contexts in a 
continuous-time models] 

Proof sketch. For each m G [n], choose a Hamiltonian cycle in the subgraph of 
Gg induced by J m , and concatenate it to itself enough times to obtain a path 



of I — (\J m \ — 1) • L r (e, i, t r {i)) + 1 vertices. Now, apply Theorem 6.34 to the 



concatenation of all these paths, in ascending order of m. The rest of the proof is 



analogous to the proof of Corollary 9.4 □ 



The proof of Corollary |9.4| gives rise to the following observation, stated using the 
notation of that proof, and under the assumptions thereof: Every path p G V{G^^) 
is a prefix of some path p' , for which there exists a (p' , <5)-traversing e-centipede that 
has a suffix that constitutes an e-broom for J. Thus, this path-traversing centipede 
yields a path-traversing centipede for every path of which p' is a prefix. While, as 
noted in the closing remarks of Chapter |6l implementing the optimal response logic 



from Corollary 6.35 may entail, in the most general setting, checking for infinitely 
many path-traversing centipedes (using infinitely many facts stored in memory), this 
observation, and the more general analogous observation stemming from the proof 



of Corollary |9. 5 provide a practical and straightforward approach for implementing 



this optimal response logic in bounded-syncausal-path contexts, as illustrated in 
Figure |5j and by the following example. 

Example 9.6. Let ( / ~f,e,I,5) be a TCR-spec s.t. 7 is a bounded-syncausal-path con- 
text, s.t. \I\ < 00 and s.t. TCR 1 {e 1 1 ,5) is solvable. For simplicity of this example, 
assume for the time being that Gs is strongly connected and that 5 > 0. Let i G / 



* By antisymmetry of S on each J m , these are invariant to the choice of representatives 

(jm) m =l- 



3 The scenario studied in the second part of Corollary 9.5 is, in a sense, a timed generalization 
of ordered joint response, in that it is to tightly-timed response and to weakly-timed response, 
as ordered joint response is to simultaneous response and to ordered response. This scenario 
generalizes all the response problems studies by Ben-Zvi and Moses that are surveyed in Chapter [6] 
As noted in that chapter, the most general form of this scenario does not fall within the scope of 
any of the coordinated response problems defined and studied by Ben-Zvi and Moses [71 [S], 
even though no weak mutual dependencies between response time exist in it. 
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4^ 4^ 4^ 



Figure 5: When I = {i,j}, an 6) -traversing e-centipede by t ('(e m )^ l=] J 

with an e-broom suffix by t' (cq) provides sufficient data for i to respond at t according 
to the optimal response logic for TCR^(e,I,5), as it implies a (p, 5) -traversing e- 
centipede by t for any p £ V(Gs) starting at p\ = i. 

It should be noted that in this example, common knowledge of the occurrence of e is 
only attained at t' . As the time at which common knowledge of this occurrence is 
attainable in a full-information protocol is independent of 5, this intuitively illustrates 
a property of the timely-coordinated response problem hinted to by the first part of 
Remark 6.33 and by Example \1.1\ opening this work in Chapter^ intuitively, the 
greater 5 is, the better a chance there is to respond earlier in many cases. 



and t G T. In a full-information protocol, the following algorithm may be applied 
by i at t to decide whether it should respond at that time according to the optimal 
response logic for TCi? 7 (e, /, 5). 

The Algorithm: First, check if any e G PND^i, t) is an e-broom for I by any 
past, present, or future time. (This only depends on the observer of e, so we may 
compute this efficiently with the aid of a precalculated lookup table. Moreover, this 
may be computed once for each e, storing the result in the state of i.) Denote the 
set of all such broom events by If B — ; then i should not respond at t. 

For each e G B, denote by br e the earliest time by which e is an e-broom for I . 
Thus, by locality of bound guarantees and as 5 > 0, we obtain that (e) n is a {p,S)- 
traversing e-centipede by br e , and by any later time, for every p = (p m )^ =1 G V(Gs). 

* While PND^i^t) may be infinite, implying that calculation of B may require infinite pro- 
cessing power and memory, we show in Claim 



9.14 



in the next section that if TCR-y (e, /, 5) is 
solvable by any finite-memory or finite-processing-power protocol, then it is enough to consider 
only finitely many events from PND^(i,t) at this stage. 
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(Note that br e — t e is a constant depending solely on the observer of e, so once 
again, some advance computation allows an efficient calculation of br e , which, once 
calculated, may be stored in the state of i.) 

Denote br = sup egB {6r e }. This is a finite quantity, due to br e — t e depending 
only on the observer of e, and by finiteness of I . Denote the set of paths p G V(G$) 
s.t. L Gs (p) < br — t by V . As 5 > 0, and as \I\ < oo ; we have \V\ < oo as well. 

i should respond at t iff for each p = (pm)m=i ^ '> there exists, by t, a (p,5)- 
traversing e-centipede e = (e m )^ =1 G PND^ii^t) 11 s.t. there exists e G B satisfying 
e -£» e n . (This check may be implemented efficiently using backtracking, and accel- 
erated using some precalculations.) 

Dropping Unneeded Assumptions: As noted above, the assumptions that 
5 > and that Gs is strongly connected are not required. Handling a situation in 
which they do not hold is not inherently different, albeit significantly more cumber- 
some. We now overview the key points of difference regarding these cases. 

First, let us drop the assumption that 5 > 0. This introduces two obstacles for 
the above algorithms, which we now rectify. 

The first obstacle is that, due to the possibility of S taking negative values, it may 
no longer hold that (e) n is a (p, 5) -traversing e-centipede by br e for every e G B and 
p = (p m )m=i e ^{Gs). For this to hold again, we redefine br e , for every e G B, as 
the earliest time satisfying e ---> (i, br e + min(5|{i} x /)) f or every i G / . (See also 
Remark 6.36 ) Note that br e is finite, by Lemma 5.1. Also note that br e — t e still 
depends only on the observer of e. We accordingly redefine V as the set of paths 
p G V(Gs), s.t. the length of p, and of every prefix thereof, is less than br — t. 

The second obstacle is that Gs may contain nontrivial cycles of zero length, which 
implies that V may be of infinite cardinality. The adjustment of the algorithm for 
this case is somewhat less straightforward. We partition I into pairwise- disjoint 
equivalence classes s.t. i,j G / are in the same equivalence class iffS(i,j) = —5(j,i). 
It may be readily verified that these equivalence classes are exactly the subsets of I 
on which 5 is antisymmetric, and that are maximal with regard to this property. 
Another characterisation of these classes, which is of key importance to us, is that 
a cycle in Gs is of length iff all its vertices belong to the same equivalence class. 
Let J C / be a set of representatives for all such equivalence classes. Denote, for 
each j G J, its equivalence class (which it represents) by Ij. We restrict V to paths 
containing only "representative" vertices j G J. (Thus, by the above characterisa- 
tion of equivalence classes using cycles lengths, \V\ < oo once again.) Finally, for 
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each p = (pm)m=i ^> we re< iuire that the matching (p, S) -traversing e-centipede 
be, in a sense, a u path-traversing centibroom" for I Pl , . . . , I Pn . To be more precise, 
we require a path-traversing centipede that, for each k e [n], does not merely satisfy 



e k (Pk,t + LG s ((pm)m=i)) ( as ^ n the path-traversing centipede definition), but 



also e k (j,t + L Gs ((p m ) k m=l ) + d~(p k ,j)), for every j e I Pk . (Checking for the ex- 
istence of all required path-traversing centipedes/ centibrooms may still be efficiently 
implemented using the same techniques as in the simpler case above.) 

Finally, we sketch the key point of adapting the above algorithm for the case in 
which G$ is not necessarily strongly connected. In this case, the syncausal structure 
underlying this algorithm is somewhat more complex. Instead of the algorithm re- 
volving around (p, S)-traversing e- centipedes / centibrooms (e m )^ =1 for which e n is an 
e-broom for all agents in I, the algorithm searches for (p, 5)-traversing e-centipedes 
(e m )m=i f or which, for each strongly-connected component I' of G5 that is visited by 
p, the event e max {m|p m e/'} ma U be an e-broom for V . 

When presenting coordinated response problems in Chapter |4j we noted that 
for many such problems, it is possible to obtain a characterisation for solvability 
from an optimal response logic. Indeed, Corollary |6.35| implies that a necessary and 
sufficient condition for solvability of the timely-coordinated response problem in a 
shared-clock model is a guarantee that in every triggered run, infinitely many path- 
traversing centipedes (one for each path in Gs) occur by some finite time. While this 
indeed fully characterises solvability of the timely-coordinated response problem, 



the complexity of this characterisation renders it not very usable. Corollary 9J3 
also allows us to present a surprisingly simpler characterisation for solvability of 
the timely-coordinated response problem of finitely many agents in a shared-clock 



model. We first present a special case thereof, which stems from Corollary 9.4 



Corollary 9.7. In a shared-clock model, let 7 be a context, let I C I 7 be finite, and 
let e G Ery. the following conditions are equivalent: 

1. TCR-y(e, 1,5) is solvable for some 5 : I 2 — > A \ {—00} s.t. Gs is strongly 
connected and contains no negative cycles. 

2. TCR 7 (e,I,5) is solvable for every 5 : I 2 — > A\ {— 00} s.t. Gs is strongly 
connected and contains no negative cycles. 

3. SR y {e,I) is solvable. 
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Proof. [3]=^[2j Let P G SR^(e,I). By Corollary 5.8 5 is implementable. Therefore, 
by Claim [KTJ TCR 7 {e,I,5) is solvable. 
[2] [TJ Immediate. 

[T] =>- [3j Let P G TCR~f(e, 1 , 5) for some such 5. W.l.o.g., assume that P is a 
full-information protocol. By combining the "stand-alone external inputs" and "no 
foresight" properties of the continuous-time model presented in Appendix [XJ we may 
construct a run r G R^{P) in which no message is delivered early less than 1 time 
unit after it is sent. (For a discrete-time model, this holds for any run r G R^(P).) 



By Corollary 9.4[ r contains an e-broom for /. Thus, P may be modified to solve 



SR~f (e, /) by modifying its response logic for all agents to: "respond at the earliest 
horizon of an e-broom for all /". (The fact that P is a full-information protocol, 
together with the fact that the clock is shared, guarantees that if a broom for all I 
exists by any t G T, then each agent in / can deduce this at t.) □ 



Corollary 9.7, together with Theorem 6.12, imply that TCR 1 {e, 1,5) is solvable 



under condition [T] of this corollary iff there exists an agent i G I 7 to which there 
exists a path p G V(Q y ) from ig and s.t. max{<5g 7 (i, < oo. Furthermore, if 

5 > 0, then given a full-information protocol endowed with the optimal response 
logic, the latest of the responses of / occurs, in each triggered run of this protocol, 
no later than 



mm{L G (p) + max{5g y (p n ,j)} jeI | p = (p m ) n m= i <E V(GJ k p x = hfj (9.1) 

time units after the occurrence of e, and this bound is tight. (If this value is infinite, 
then there exist triggered runs in which the time of the latest of the responses is 
arbitrarily large.) 

Using Corollary |9.5 , we may similarly deduce a generalization of Corollary 9/7 



for the case in which G$ is not necessarily strongly connected, yielding a character- 
isation for solvability of any instance of the timely-coordinated response problem of 
finitely many agents in a shared-clock model. 

Corollary 9.8. In a shared-clock model, let (7, e, I, 8) be a TCR-spec s.t. |/| < 00 
and s.t. Gs contains no negative cycles. TCR^(e,I,5) is solvable iff for every tuple 
(ii,...,/ n ) of strongly- connected components of Gs s.t. there exists a path in Gs 
from I rn to I m+ i for every m G [n — 1], there exists (i m )^ =1 G I 7 satisfying: 



A generalization of this expression, for cases in which 5^0, may be readily obtained by 



applying Remark 6.36 



9.2. FINITE-INFLUENCE PROTOCOLS 



75 



There exists a path in Q 1 from through i n , through i n -\, . . . , to i\. 
max{5g y (i m J)} j€lm < oo, for every me [n\. 



(A natural, yet more cumbersome, analogue of (9.1) may be phrased under the 
conditions of this corollary as well.) 



Corollary 9.8 implies, in particular, that solvability of TCi? 7 (e, /, 5) depends only 
on the strongly-connected components of G$, on the partial order it induces on them, 
and on Q 1 . In most practical situations, Q 1 is strongly connected, as absence of this 
property means that there exist two agents i, j G I 7 s.t. i may never hope to send 
any data to j, either directly or indirectly. If indeed Q 1 is strongly connected, then 



Corollary |9.8| reduces to the following, surprisingly simple, condition for solvability 
of the timely-coordinated response problem, with which we conclude this section. 

Corollary 9.9. In a shared-clock model, let (7, e, /, 5) be a TCR-spec s.t. is 
strongly connected, s.t. \I\ < 00 and s.t. G$ contains no negative cycles. The fol- 
lowing conditions are equivalent: 

1. TCi? 7 (e, /, 5) is solvable. 

2. SR y (e, J) is solvable, for each strongly- connected component J of G$. 

3. For every strongly- connected component J of G$, there exists i G I 7 s.t. 
max{8g Ji,j)} je j < 00. 



9.2 Finite-Influence Protocols 

In this section, we explain, as promised, why the results of the previous section hold 
also for models in which the memory or processing power of each agent is limited. 
As a nice bonus, many of those results, which in the previous section held only for 
finite sets of agent, will turn out to hold in such models for infinite sets of agents as 
well. To give some intuition for the definition that we use to make this explanation 
precise, we first prove a result regarding simultaneous response among infinitely 
many agents. 



Recall that Theorem 6.12 implies that in a discrete-time model, simultaneous 



response of finitely many agents based on an ND event requires the existence of a 



broom. In Corollary 9.4, we have relaxed the requirement for discrete-time in this 
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result to a requirement for a bounded-syncausal-path context. A natural question 
to ask is whether the requirement for finiteness of the set of responding agents may 
somehow be relaxed as well. A quick check shows that none of the proof strategies we 



have seen so far for (any variant of) Theorem 6.12 scale to the case of coordinating a 
simultaneous response among infinitely many agents. Indeed, it turns out that while 
a broom for any finitely-sized subset of agents is guaranteed under such conditions (it 
is not hard to show that such a collection of finite brooms is sufficient to optimally 
coordinate a simultaneous response of all agents)^ a broom for all agents is not 
guaranteed even in bounded-syncausal-path contexts. (As may be expected, such a 
broom is sufficient for coordinating a simultaneous response, although it is possible 
to construct an example in which the response logic based on the existence of such a 
broom is non-optimal.) The following theorem characterises the conditions required 
for simultaneous response of countable many agents in a bounded-syncausal-path 
context and shows that there are, in a sense, some unintuitive consequences to 
the absence of a broom for all agents in this situation. We will shortly use the 
insights this theorem provides us in order to phrase a restriction on protocols, which 
disallows such "consequences". 

Theorem 9.10 (Infinite Broom or Infinitely Many Brooms). Let 7 be a bounded- 
syncausal-path context, let I C Ly s.t. \I\ = Ko, let e e £ 7 and let P e S'i? 7 (e, /). 
For every r G R^(P), one of the following holds: 

1. There exists an e-broom for I by t r in r; or 

2. For every finite J C I, there exist infinitely many distinct e-brooms for J by 
t r in r. 

Proof. Set t = t r . Let J C I be finite. We inductively construct a sequence of sets 
of ND events {E k )f =1 E ND y (r) N , satisfying: 



This observation is closely tied to the fact that by Definition 7.5 in any context we have: 



JCI 
I J|<oo 



for any set of agents /, regardless of its cardinality. Readers who find it intuitively difficult to 
accept this "finiteness" of common knowledge (which yields the above mentioned possibility of a 
simultaneous response of / in a bounded-syncausal-path context in the absence of a broom for 
I) may wish to read [I], in which Barwise suggests an interpretation of knowledge in which the 



fixed-point definition of common knowledge (Theorem 7.11 ) is strictly stronger than its definition 



as a conjunction of finitely-nested knowledge events (Definition 7.5 1 
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• E 1 = J. 

• Vfc G N : < oo. 

• Vk eN : E k C E k+X . 

• U^ =1 E k = I. 

To construct choose any well-ordering of I under which it is isomorphic to 

u, and given E k for k G N, set -Efc+i = U {min{/ \ E k }}. 

For every fc£N, set B k = {e G ND^(r) | e is an e-broom for ^ by t in r}. By 
Remark 4.14 and by Corollary |9.4 VA; G N : B k ^ 0. Furthermore, by the definition 



of a broom and since (E k ) k ^ =1 is increasing, Vfc G N : B fc 3 -Bfc+i- 

If l-Sil < oo, then VfceN: |.B fc | < oo and all of {-BaJ^Li are therefore closed 
under the co-finite topology on N and have the finite intersection property From 
compactness of N under this topology, we obtain B = H^-Bfc ^ 0. Let e G B. By 
definition of (B k ) k x L 1 , e is an e-broom for U^E^ = / by t, and the first condition 
of Theorem 19.101 is satisfied. 

Otherwise, B\ is of infinite cardinality, and thus J satisfies the second condition 
of Theorem HOI □ 



Theorem 9.10 shows that in the absence of a single broom for all agents in J, 
there are, for each i G /, infinitely many brooms that are "important" to i, in 
the sense that the existence of any finite subset thereof is not sufficient to trigger 
the response of % at t. It seems unrealistic for % to check (directly, or indirectly 
by receiving this information from some other agent) that infinitely many brooms 
existfl We now formalize this intuition. 

Definition 9.11 (Finite- Influence Protocol). Let 7 be a context. We say that a 
protocol P G P 7 is a "finite-influence" protocol if for any run r G Ry(P) and for 

any agent-time pair (i,t) G I 7 x T s.t. i responds in r at t, there exists a finite 

p * 
t-retainable set E G RND^ (r, t) s.t. i still responds at t in r fl E. 

Obviously, all protocols in any context in which only finitely many messages 
may be sent (or rather, may be delivered early) in any bounded time frame, are 

* It should be noted that while one may argue that sending infinitely many messages is equally 
unrealistic (an argument that suggests that even ER~(e,I) is unsolvable for infinite /), we would 
like to argue that broadcasting a single message from one agent to infinitely many agents may not 
be inconceivable. For example, one may post such a message in a publicly- visible place such that 
each agent is guaranteed to notice this message within a given time period after its posting. 
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finite-influence protocols. When only finitely many agents exist, then all protocols 
in any discrete-time context in which a universal positive lower bound on all delivery 
times holds, are also finite-influence protocols. As noted in the previous section, 
both of these properties are traditionally taken as axioms, and this is equally true 
for finiteness of the set of agents. While, as noted above, not all finite-memory and 
finite-processing power models guarantee bounded-syncausal-path contexts, we now 
explain why all protocols in such models are finite-influence ones. 

If a protocol P is not a finite-influence protocol, then there exists a run r £ 
R-y(P) and an agent-time pair (i,t) s.t. by time t either i, or some other agent who 
sends information to i, has to either take infinitely many ND events into account 
when performing some state change (i.e. no finite subset of these events taking 
place would have yielded the same state change), or perform infinitely many state 
changes. This implies that at least one agent utilizes infinite processing power in 
finite time. If, furthermore, we assume that no two ND events reach an agent at 
exactly the same time (it is enough to assume that the logic of % can not atomically 
access information regarding more than one ND event observed by it), then that 
agent not only utilizes infinite processing power, but also infinite memory, as the 
infinite amount of state changes described above must involve infinitely many unique 
states. (Alternatively, the computation of such a single state change that takes into 
account infinitely many ND events, requires infinite memory.) 

We may conclude that for finite-influence protocols in bounded-syncausal-path 



contexts, Theorem |6.12| holds even when time is continuous and when I may be 
countably infinite. It took us quite a chain of reductions and conclusions to show 
this. One may argue that this might suggest that the concept of finite influence 
is somewhat artificial, and "not from the book". To try and refute this argument, 
we now present a novel, direct and concise proof of Theorem |6.12| which holds for 
any finite-influence protocol (even in a continuous-time model), regardless of the 
context and of the cardinality of 

Theorem 9.12 (Broom). Let 7 be a context, let I C I 7; let e £ E 1 and let P £ 

SR y (e, I) be a finite-influence protocol. Each r £ R^(P) contains an e-broom for I 



This proof extends immediately to proving the second part of Corollary 9.4 



under the condi- 



tions of Claim 9.14 below (implying an infinite-agent version of Theorem 6.22 for finite-influence 
protocols), and even extends (using an inductive argument very similar to the one used in Theo- 
6.34 1 to prove the second part of Corollary 9.5 under the conditions of Claim 9T4] (implying an 



infinite-agent version of Theorem 6.f6 for finite-influence protocols). For the sake of conciseness, 



though, we phrase and prove it here only for simultaneous response. 
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by t = t r . 



t 

9.12\ there exists r' C r szzc/i i/ia£ 



Claim 9.13. Under the conditions of Theorem 
t r i = t, such that \ND^(r',t)\ < oo and such that PND 1 ^ (i,t) = iVZ) 7 (r',t) for every 
i G /. 

Proof. Let E G RND^(r,t) be minimal such that t r n£ = t. (There always exists 
such a finite set, due to P being a finite-influence protocol, since by correctness of 
P, if even one agent i G I responds at t, then all agents in / do.) By definition, 
E = ND 7 (rnE,t). 



Let i G I. Set E' = PND r f E (i,t). By Corollary 6.29| E' G RND* (r h E ,t), and 



the state of z at £ is the same in r (1 E and in (r D E) D -E/ = r C\ E . Therefore, 
z still responds at t in r fl Thus, by correctness of P, we obtain t^W = ^- By 

i 

minimality of -E, therefore, since E' C .E, we obtain £" = i£, and thus any r' G rC\E 
fulfills the above requirements. □ 



Proof of Theorem 9.12. Let r' be as in Claim 9.13 and choose e G NDry(r',t) with 

maximal t e among all those satisfying e -p- e. (There always exists such an event, by 

finiteness of ND^ir', t) and as e is always a viable candidate, since e G ND 7 (r', t r >) = 

t 

ND 7 (r' ,t), by correctness of P and as t r > = t < oo.) Since r' C r, any syncausal 
path in r' ending no later than at t is also a syncausal path in r, and therefore also 
e -w e. Let i G J. As e G ND^r' ,t) = PND r ^(i,t) } we obtain e -J (i,t). Note that 

any delivery d f e along any syncausal path e ~? (i,t) satisfies both e -p>- d and 
£ e < td- Hence, by maximality of t e , we have d ND y (r' ,t). Moreover, since t^ < t, 
we obtain d f. ND^(r ) as well. Therefore, we obtain e --■ » (z,£). □ 

As noted in the previous section, the fact that a protocol is a finite-influence 
one need not dictate, in general, that the context is a bounded-syncausal-path one. 
Nonetheless, we now demonstrate a general technique that can be employed to 
show that many results regarding the existence of syncausal structures in bounded- 
syncausal-path contexts hold for finite-influence protocols in arbitrary contexts as 
well. Furthermore, many such results, which hold only for finite sets of agents in 
bounded-syncausal-path contexts, generalize, for finite-influence protocols, to hold 
for infinitely many agents as well. 



Claim 9.14. Corollary 9.4 (resp. Corollary 9.5) also holds when P is a finite- 
influence protocol, even when dropping the requirements for a bounded syncausal 
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path from e to (i, t r (i)) and for finiteness of J (resp. of each J m ). Under these 
conditions, the first part of that corollary guarantees, for arbitrary i G J (resp. 
i G J\) of our choosing, a finit^ bound of the form b(t r (i), sup(5|j2), \E\) (resp. 
6(t r (i),n, (sup((5| Jm 2))™ =1 ,(mf(<5|j mX j m+1 ))^l 1 1 ,| J E|);, where E is a minimal t r {i)- 
retainable set that still guarantees i's response at t r (i). 



Proof. We present a proof of Claim 9.14 with regard to the first part of Corollary |9.4[ 



The proofs with regard to the second part thereof, and to both parts of Corollary |9.5[ 
are analogous. 

Let (7, e, /, 5) be a TCR-spec, Let P G TCi? 7 (e, 1,6) be a finite-influence pro- 
tocol, let r G R^{P) and let J C I s.t. sup(<5|j2) < 00. Let i G J and let 
E G RND^(r,t) be minimal s.t. t r n£;(^) — tr(i). (Since P is a finite-influence 
protocol, there exists such a minimal E, and \E\ < 00.) 

We first give a proof for the special case in which |J| < 00, proving a weaker 
statement as we allow the bound to depend on |J| for the time being. 

Define t = t r (i) and r' = r fl E. As L r >{e,{i,t r >{i))) < \E\ < 00, Corol- 
lary |9.4 may be applied to show the existence of an e-broom in r' by (no later than) 



b(t r '(i), sup(<5|j2), I J|, L r /(e, (i, t r /(i)))) < b(t r (i), sup(5|j2), | J|, \E\). As the broom 
event occurs no later than t r i(i) = t (and thus is in ND^r^t) = E), this broom 
exists in r as well. 

We now explain why the requirement for finiteness of |J| may be dropped. Set 
b = b(t r (i), sup(5| J2), \E\, \E\) < 00 — the same bound as in the first part, substi- 
tuting I J| with \E\. If some e G i£ constitutes an e-broom for J by 6, then we are 
done. Assume, by way of contradiction, that this is not the case. Thus, for each 
e G E, there exists j e G J s.t. e -/•* (j e , 6). The set {j e }e<=E is of size no greater than 
\E\ < 00, so the first part of this proof may be applied to it, yielding that there 
exists e G E that constitutes an e-broom for {j e } e &E by b — a contradiction. □ 



As may be expected, Claim 9.14 yields generalized versions of the results of the 
corollaries that it generalizes. 



Corollary 9.15. In Corollaries 9.1, 9^8 and\9.9\ the requirement for finiteness of 



agents may be relaxed to 5 being bounded from above on each strongly- connected 



* Once we allow J (resp, each J m ) to be infinite, though, the first part of that corollary 
requires the additional assumption that 6 is bounded from above on J (resp. on each J m ), for the 
guaranteed bound to be finite. (This assumption was redundant as long as J (resp. each J m ) was 
finite.) 
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component ofGs, if SR y and TCRj are restricted to finite-influence protocols, and 
if the requirement of G$ containing no negative cycles is generalized to 5 being 
implementable. 



9.3 Unbounded-Message-Delivery Contexts 

We conclude this chapter by revisiting the scenario with which we opened it — that 
of the two generals who attempt to coordinate a simultaneous attack on a village. 
By now, they would probably be content with even an approximately simultaneous 
attack, so we consider this more generalized case. We use the insight this scenario 
has given us, which led us to define bounded-syncausal-path contexts, to prove the 
following impossibility result. This result both generalizes [TTJ Corollary 6.1.4], 
which shows that in a context that exhibits unbounded message delivery in a 
discrete-time model, common knowledge is unattainable, and strictly strengthens 
[TTJ Corollary 11.6.4], which shows that in a context that exhibits arbitrary message 
loss in a discrete-time model, e-coordination based on an ND event is unattainable. 

Corollary 9.16. Let 7 be a bounded-syncausal-path context satisfying bj(i,j) = 00 
for every G iV^jj, let (1,6) be an implementation- spec s.t. I C I 7; and let e 
be any ND event. If G$ has any nontrivial (i.e. non-singleton) strongly- connected 
component, then Cf (®-°(e) = (0)ie/ i7^ 7 (p), for every P G P 7 . 



Proof. By revisiting the proof of Theorem |6.34[ we may notice that it does not 
use all the properties of the timely-coordinated response problem. Let us define 
TCR' 7 (e,I,8), a strictly weakei^] variant of the timely-coordinated response prob- 
lemj^] as the set of all protocols P G P 7 satisfying: 

• In each r G i? 7 (P), either no i G / responds, or they all do, each exactly once. 
In each r G -R 7 (-P) \ R^(P), no i G / responds. 

• In every run r G Rt(P) in which all / respond, it holds that t r G T(5). 



It may be readily verified that the result of Theorem 6.34, using the exact same 



proof, still holds for TCR ' 7 , for every triggered run during which all / respond. 



* Such a context is said, in [TT], to exhibit "unbounded message delivery". 
§ In the sense that TCR 7 {e,I,S) C TCR'^{e,I,5). 

™ While we have only defined the timely-coordinated response problem as based on external 
input events, it may be readily verified that all our results regarding it still hold if we allow it to 
be based on any ND event. 
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Furthermore, by Theorem 7.24 and by Corollary |7. 31 the response logic defined in 
the latter is optimal in the sense that a full-information protocol endowed with 
it solves rCi?' 7 (e, I, and moreover, for every full- information protocol P G 



TCR'j(e,I,8), in each run thereof during which all / respond, replacing the re- 
sponse logic of P with this optimal response logic would still yield responses of all 
/ in this run, and no response time would grow. 

Assume, by way of contradiction, that there exists P G P 7 and i 6 / s.t. 
Cj (®-°(e))j 7^ in Q^ipy Assume w.l.o.g. that P is a full-information protocol^ 
Furthermore, as we have not given any restrictions regarding the response logic of P, 



assume w.l.o.g. that P is endowed with the response logic defined in Corollary 7.31 
By the above discussion, P G TCR\(e,I,5). Let (r,t) G C|(@-°(e)j. As in the 
proof of Theorem fL24\ (r,t) C ♦(lfj(C^(®^ (e) i ))) for every j G /, and thus all 



I respond in r according to P. Let (j, k) G I 2 be a pair of distinct agents from 
the same strongly-connected component of Gs- As 6 7 = oo, the bound-guarantee 
relation is local-only. 
Theorem 



6.34 



when applied to S and to paths alternating between j and k, 
implies, for every n G N, a syncausal path in r, from e, alternating, by t r (j) (which, 
by the above discussion, is finite), n times back and forth between j and k (as the 
bound-guarantee relation is local-only), which is impossible in a bounded-syncausal- 
path context — a contradiction. □ 



Alternative proof ending. By Corollary 9.4|P a broom for {j, k} exists in r, contra- 
dicting the fact that the bound-guarantee relation is local-only. □ 



Remark 9.17. In Corollary \9.16 , utilizing the technique employed in the proof of 
Claim 9.14\ the requirement for a bounded- syncausal-path context may be dropped if 
P is restricted to be a finite-influence protocol. 



It is only fitting that Corollary 9.16 concludes the presentation of novel results 
in this work, as it demonstrates the added value of our dual approach to solving the 
timely-coordinated response problem, as the proof we have given thereto (regardless 
of the choice of ending) utilizes elements that are unique to each of the approaches 
we have taken. 



* It should be noted that if Gs is not s trongly connected, then this is not generally true for 
the response logic defined in Corollary 



6.35 



nor is it generally true if we replace Cj with Cj . 



§ It may be readily verified that adding auxiliary variables to the state of each agent in order 
to turn P into a full-information protocol may only enlarge C s r (@ -°(e)j 



™ The same proof we have given when deducing Corollary 9.4 from Theorem 6.34 may be used 



to show that it, too, holds for TCR' 7 , for every triggered run during which all / respond. 



Chapter 10 

Deriving Previous Results 



In this chapter, we show how some previously-known results may be derived from 
the novel results we have introduced in previous chapters. 

10.1 General Ordered and Timed Responses 

The problem of "general ordered" response was defined and studied by Ben-Zvi and 
Moses[5]. In this coordinated response problem, the relationships between the times 
of the responses of finitely-many agents is dictated by a given partial order relation 
< on classes of agents. The problems of ordered response, simultaneous response 
and ordered joint response, which were surveyed in the introduction to Chapter [6j 
are all special cases of this problem. 

It may be readily seen that the general ordered response problem is a special 
case of the timely-coordinated response problem, for 5 with the canonical form 



It should be noted that G$, sans the weights, is a DAG commonly used to describe 
the dual relation > in many applications. Hence, for S with the above canonical 
form, every path p e V(G$) is a weakly-decreasing tuple. For the above-mentioned 
special cases of general ordered response, this formulation coincides with their for- 
mulations as special cases of the timely-coordinated response problem, which we 
have given in the introduction to Chapter [6] 

Ben-Zvi and Moses show that the syncausal structures underlying the general 
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ordered response problem (those that are guaranteed to exist in each triggered run 
of a solving protocol thereof, and that may be used to define an optimal response 
logic therefor) are centibrooms — one for each linearly-ordered chain of classes of 



agents, as guaranteed by Theorem 6.16 for such a chain in the ordered joint response 



problem. The second part of Corollary |9.5| reduces to this result in the special case 
of the general ordered response problem, and reduces to Theorem 6.16| in the special 
case of the joint ordered response problem. 

Similarly, in the special case of the simultaneous response problem (resp. the 
tightly-timed response problem, with 5 as in Remark 6.20), the second part of 



Corollary |9.4[ together with Remark |6.36| and with Theorem |6.34[ reduce to Theo- 
rem 



6.12 (resp. Theorem 6.22). 



Last but not least, we consider the case of ordered response (resp. weakly-timed 
response with S as in Remark 6.18). In this case, the above-described partial order 
on / constitutes a linear ordering thereof. Therefore, all paths in Gs are subpaths 
of the single strongly decreasing Hamiltonian path p = {p m )m=i e ^P{Gs). There- 
fore, for every i G I, all paths p' G V(G$) satisfying p[ = i are subpaths of the 
suffix of p that starts with i, which we denote by p<j. Thus, every corresponding 
(jf, 5)-traversing e-centipede is a subcentipede of a (p<i, 5)-traversing e-centipede 
by the time of z's response. This path-traversing centipede is, in turn, simply an 
e-centipede by that time for p<i rev . Thus, Theorem 6.34 and Corollary 6.35 reduce 
to Theorem 6.8 (resp. Theorem 6.21) in this case. 

As previously noted, the proof that we presented to Theorem 9.12 readily gen- 
eralizes to directly prove, among others, all the results surveyed in this section. 



10.2 Common Knowledge and Variants 

For the duration of the section, fix a context 7, a set of runs R C TZ 7 , an event 
ij) G J-r and a set of agents I C I 7 . As noted above, while all previously-studied 
variants of common knowledge that are surveyed in the introduction to Chapter [7] 
are defined as fixed points of functions on JFr, this is not the case with 6-common 
knowledge, which we define as a fixed point of a function on J-'r 1 . Intuitively, as 
noted in that chapter, this stems from the asymmetry of 6-coordination with regard 
to the requirements posed on the various agents. Given this intuition, one may 
expect 5-common knowledge to reduce, for constant 5, to a non-tuple fixed point 
in some way. Indeed, if 5 is a constant function, then it is straightforward to verify 
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that Ki(Cf(i/>)) = Ki(nCf(i/})) for every i e I and that nCf(i[>) is the greatest 
fixed point of D/^. We now review the previously studied non-tuple variants of 
common knowledge and discuss when, and how, the above-described special case of 
5-common knowledge for constant S generalizes them. 

When 5 = oo, then by definition, 5-coordination is equivalent to eventual coor- 
dination, n/i is the function presented in the first part of Theorem 7.14, and thus 
nCj(^) = Cfijp). In addition, in this case Theorem 



7.24 



implies Theorem 



7.14 



Reducing the results of 5-common knowledge to e-common knowledge, for finite 
e, is somewhat more delicate. Assume, for the remainder of this section, that 5 = e 
for some finite e > 0. (Recall that for e = 0, ^-coordination is equivalent to perfect 



coordination and Theorem 7.16 reduces to Theorem 7.10 



In general, e-coordination is a stricter condition than ^-coordination]^] For a sta- 
ble ensemble, though, 5-coordination is equivalent to e-coordination. If we restrict 



ourselves to protocols exhibiting perfect recall, then by Corollary the ensemble 
defined by 5-common knowledge is stable. If, in addition, ip is stable, then it may 
be verified that the ensemble defined by e-common knowledge is stable as wellj^] In 

Cj(ip) is the greatest fixed point of gt and thus, nC|(^) 

but in 



this case, by Lemma 



8.12 



8.12 



is the greatest fixed point of n<n. Analogously to the proof of Lemma 
a less cumbersome way (as 5 < oo), it may be shown that in this case Cf(ip) is the 



* This stems from two main "reasons" : 

1. ^-coordination is denned using ) rather than ®[ _ *C?>*)!*(*iJ)] ) which we define to mean 

"at some time no earlier than —5{j,i) from now and no later than S(i,j) from now". It 
may be readily seen that all the results in this work hold for such a definition as well, as 
long as this replacement is performed in the definition of as well. The only difference is 



that Claim 8.7 stating that (5-common knowledge is stable, requires also stability of ip and 
perfect recall in this case, and is proven by showing that ®-° (Cf (ip)) < f^{®- (Cf(ip)) 
and by applying the second part of Lemma |7.23| 

2. (5-coordination is based on pairwise constraints. The results presented in this work may 
be quite readily generalized to deal with arbitrary timing constraints of various natures, 
such as, e.g. for some J C J, "For every i £ J and for every (r,t) £ e,, there exists 
a time interval T C T of length at most Sj, s.t. t £ T and s.t. there exist (tj)ieJ G 
T J satisfying (j,tj) £ T for every j £ J". (Whatever the timing constraints are, the 
generalized definition of /5. simply intersects on all constraints pertaining to i.) Under 
such a generalization, e-coordination is equivalent to (5-coordination, when setting 8i = e 
in the above constraint example, and when providing no further constraints. Furthermore, 
in this case the generalization of /5 satisfies that D/^ is the function presented in the first 
part of Theorem |7.16| and thus the appropriate generalization of Theorem |7.24| reduces to 
Theorem EH 

§ The key observation required for showing this is that ®-°(Cf (V>)) C Ej(tp n ®-°(C| (-0))), 
j;iven stability of ip and perfect recall. 
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greatest fixed point of Hg^ as well, and thus C\Cf(i/;) = Cf {ip) |*] 

In the absence of stability of ip, or in the absence of perfect recall (at least of 
the "relevant events"), things stop working so well. Indeed, as noted above, in such 
cases ^-coordination does not necessarily coincide with e-coordination, and conse- 
quently, examples may be constructed in which the ensembles defined by e-common 
knowledge and by 5-common knowledge differ. 



* Another way to derive this equality is by using pTJ Exercise 11.17(d)], which shows that, 
for every i e I, when i\> is stable and given perfect recall, Ki(Cf(ip)) = Ki(r\ ne f<i(© £ E^fy)), to 
which (8.2 1 reduces when S = e. It should be noted, though, that the proof hinted to by [TT1 
Exercise 11.17(d)] strongly relies on a discrete modeling of time, and breaks down in a continuous- 
time model, unlike the proof that we sketch above. 



Chapter 11 



Discussion and Open Questions 



11.1 A Qualitative Comparison of Approaches 

Throughout this work, reasoning alternated between two approaches, which are 
based on different motivations and thus were previously studied only separately. In 
Chapter [8j though, we showed that despite the vast conceptual difference between 
these two approaches, they in fact yield equivalent results for the timely-coordinated 
response problem. Nonetheless, this conceptual gap makes each approach conve- 
nient for different purposes. Consequently, we have utilized each approach to attack 



a different set of problems in Chapter|9] Moreover, in Corollary |9. 16| we concurrently 
harnessed both approaches to obtain a strengthened version of a previously-known 
result. 

The strength of the syncausal approach, similarly to that of Lamport's asyn- 
chronous causality [T7| that it generalizes, is its constructiveness and concreteness. 
These properties make it ideal for graphical visualization of runs and for algorithm 
design. However, their price is the need to adapt and specifically tailor the general 
results for each model flavour, as we have done in Chapter [9] 

Conversely, the strength of the fixed-point approach lies in its generality and in 
its high level of reasoning. These properties make proofs that follow this approach 
far less cumbersome, and far more general, due to the fact that, as we have seen, the 
concept of knowledge effectively hides the minute details of the model in question. 
The downside of this is the fairly large gap, both between a fixed-point definition and 
a constructive definition, as we have seen in Chapter [8j and moreover — between 
a constructive knowledge-based definition and concrete implementation, as studied 
by Ben-Zvi and Moses[6j EJ [H [8] following Chandy and Misra[9]. 
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Given these observations, it is not surprising that the results we obtained using 
fixed-point analysis in Chapter[7]are far more general (and can even be further gener- 
alized, as noted in Chapter [To]), than the results we obtained using syncausal analysis 
in Chapter [6j However, it is the latter that were easier for us to turn into a concrete 



algorithm in Example |9.6[ and into a concrete condition, in terms of required guar- 
antees on message delivery times, for solvability of the timely-coordinated response 



problem in a given context in Corollaries |9.9| and 9.15 



11.2 On Generalizations 

Much of this work is based on two generalizations of known approaches. Nontrivial 
generalizations tend to have a sneaky property: on one hand, a conceptual leap is 
required in order to achieve them, while on the other hand, once they are achieved, 
this leap, in hindsight, seems almost obvious. 

The work of Ben-Zvi and Moses on syncausal analysis P, El IE] is implicitly 
intertwined with an insight, which holds for all of the problems they define and an- 
alyze: Each of these problems has one, succinctly-describabk^J syncausal structure 
underlying itj^] Indeed, when we started looking at simple two-agent cases of what 
would eventually become the timely-coordinated response problem, we attempted 
to find such a simple structure, or possibly only a few simple structures. 

Moreover, the asymmetry inherent in the syncausality and bound guarantee 
relations expresses itself in the problems defined by Ben-Zvi and Moses, in that 
the timing dependency between the response times of two agents in these problems 
may only be single-sided, which allows the response of one of these agents to not 
depend on the response of the other ^\ Indeed, as noted in Chapter [6j this is the main 
difference, both conceptually and technically, between the response problems defined 
and studied by Ben-Zvi and Moses [HI El E] and the timely-coordinated response 
problem, which we have defined and analyzed in this work. As we have seen, it 

* One may almost claim that the description should be linear in the number of agents. 

§ The one exception to this is the general ordered response problem, which is treated by Ben- 
Zvi and Moses[5] as a conjunction of independent ordered joint response problems, and thus their 
solution consists of a conjunction of the syncausal structures (i.e. the centibrooms) underlying 
each of these ordered joint response problems. 

^ Actually, their analysis, as we have seen, also allows a precise timing dependency between 
two response times (i.e. a specified fixed time difference), which allows them to be treated, in a 
sense, as a single response in the solution of the problem. Their analysis does not, however, allow 
a mutual (i.e. double-sided) non-precise dependency. 



11.3. OPEN QUESTIONS AND FURTHER DIRECTIONS 



89 



is the presence of mutual non-precise dependencies, that changes the "rules of the 
game" from revolving around one, fairly simple, syncausal structure to revolving 
around infinitely many, or alternatively finitely many yet very complex^ syncausal 
structures, which may not, in general, be replaced by simpler or fewer structures]^] 
As we commented earlier, up until now the fixed-point approach has only been 
applied to problems whose description exhibits an inherent symmetry between the 
agents, in the sense that it is invariant under permutations on the set of agents. 
As noted in Chapter [7] it is the absence of this symmetry that "twisted our arms" 
and conceptually necessitated the nontrivial jump from searching for a fixed point 
of a scalar function to searching for a fixed point of a vectorial function. Moreover, 
even after the realization that this is the way to go, this vectorial treatment was 
the main technical obstacle in our fixed-point analysis. 



11.3 Open Questions and Further Directions 



Throughout this work, we assume a context in which the eventual delivery of any 
message is guaranteed. In many models that do not present this behaviour, arbitrar- 
ily long syncausal paths present themselves with zero (or very small) probability, 
effectively displaying a behaviour similar to that of the class of bounded-syncausal- 
path contexts, which we defined in Chapter [9] It may be interesting, therefore, to 
develop such probabilistic models and to check whether the results given in Chap- 
ter [9] for bounded-syncausal-path contexts may be applied to such models, if only 
to yield either probabilistic results or impossibility results. 

Corollary |9.7 implies that in a shared-clock, bounded-syncausal-path context, 
solving an "almost-simultaneous" response problem is not any more possible than 



solving a simultaneous response problem. Moreover, if both are solvable, then (9.1 ) 



implies that in the worst-case scenario, the time of the latest of the responses in the 
optimal solutions to both problems is the same/ ' As was noted in Corollary 9.15 



In fact, arbitrarily complex even for two agents. 

Such a "replacement" is performed e.g. in the proof of Ben-Zvi and Moses[Hl[S] for the first 
In this work, we obtain such replacements for some special cases of the 

and 



part of Theorem 6.12 



timely-coordinate d res ponse problem in Corollaries 
™ By Corollary 



9.4 



9.5 



and in Claim 



9.14 



similarly relaxing the tight constraints of an ordered joint, or tightly-timed, 
response problem also does not make it solvable in any additional contexts, nor does it improve 
the worst-case time of the latest of the responses. 

II Nonetheless, in all cases the relaxed version may be solved significantly faster than the 
original one in many runs, as illustrated in Figure [5] (Thus, ACME's engineers were on the right 
track in Example It would be interesting to give this observation a precise meaning in a 

probabilistic model, perhaps in terms of average-case response time. 
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even without the assumption of a bounded-syncausal-path context, these results 
hold as long as we make some reasonable assumptions regarding fmiteness of mem- 



ory or of processing power of each agent. Furthermore, Corollary 9.16 shows that in 
the lack of any delivery guarantees, none of these problems are solvable under such 
reasonable assumptions. Nonetheless, it has been shown in [TT1 Subsection 11.2.1] 
that in models without a shared clock, "up-to-e" coordination may be possible even 
when perfect coordination is not. It would be interesting to see whether the machin- 
ery presented in this work may be applied, perhaps in some extended or generalized 
form, to shed new light on models in which the clock is not shared. 

In Chapter [7| we defined and analyzed 5-coordination, a generalization of sev- 
eral forms of coordination defined and analyzed by Halpern and Moses [14] and by 
Fagin et al.[Hl Section 11.6]. In Chapter 10 we noted that some special cases of 
e-coordination (another form of coordination defined in [TJ1 [TT]) are not general- 
ized by 5-coordination. While, as we noted there, our definition of 5-coordination, 
along with all our results regarding 5-common knowledge, may be quite readily gen- 
eralized to deal with additional forms of coordination constraints, including those 
of e-coordination, it remains to be seen whether such generalizations are of any 
real added value. In this context, it is worth to recall the difficulty we encoun- 
tered in Chapter [7| in giving a succinct characterisation to the ensemble defined 
by 5-common knowledge (or by e-common knowledge, for that matter) of an event 
along the lines of "the greatest 5/e-coordinated ensemble satisfying. . .". This dif- 
ficulty, coupled with slight differences in the properties of 6/e-common knowledge, 
raises the following question: have we truly given the "right", "from the book" 
definition for 6-common knowledge? (Similarly, have Halpern and Moses [H], and 
Fagin et al.[HJ Section 11.6], given the "right" one for e-common knowledge?) or 
is a similar, yet succinctly characterisable, fixed-point definition still waiting to be 
phrased? 

We conclude this work with a comment about fixed points. As we have seen, 
fixed-point analysis of coordination is useful in a significantly broader range of 
cases than previously thought. Many systems around us, from subatomic physical 
systems to astrophysical ones, and from animal societies to some stock markets, 
exist in some form of equilibrium fixed point, possibly reached as a result of a 
long-forgotten spontaneous symmetry breaking. This leads us to conjecture that 
describing distributed algorithms as fixed points may potentially be of much further 
advantage and provide us with additional insights that are yet to be discovered. 



Bibliography 



[1] E. A. Akkoyunlu, K. Ekanadham, and R. V. Huber. Some constraints and 
tradeoffs in the design of network communications. In Proceedings of the 5th 
ACM Symposium on Operating Systems Principles (SOSP ? 75), pages 67-74, 
1975. 

[2] A. Arnold and D. Niwihski. Rudiments of fi- Calculus, volume 146 of Studies 
in Logic and the Foundations of Mathematics. North-Holland, Amsterdam, 
Netherlands, 2001. 

[3] R. J. Aumann. Interactive epistemology I: Knowledge. International Journal 
of Game Theory, 28(3):263-300, 1999. 

[4] J. Barwise. Three views of common knowledge. In Proceedings of the 2nd 
Conference on Theoretical Aspects of Reasoning about Knowledge (TARK '88), 
pages 365-379, 1988. 

[5] I. Ben-Zvi. Causality, Knowledge and Coordination in Distributed Systems. 
PhD thesis, Technion, Israel Institute of Technology, Haifa, Israel, 2011. 

[6] I. Ben-Zvi and Y. Moses. Beyond Lamport's happened-before: On the role of 
time bounds in synchronous systems. In Proceedings of the 24th International 
Symposium on Distributed Computing (DISC 2010), pages 421-436, 2010. 

[7] I. Ben-Zvi and Y. Moses. On interactive knowledge with bounded communi- 
cation. Journal of Applied Non-Classical Logics, 21(3-4):323-354, 2011. 

[8] I. Ben-Zvi and Y. Moses. Agent-time epistemics and coordination. Unpublished 
manuscript, available on arXiv, 2012. 

[9] K. M. Chandy and J. Misra. How processes learn. Distributed Computing, 
l(l):40-52, 1986. 



91 



92 



BIBLIOGRAPHY 



[10] B. A. Coan, D. Dolev, C. Dwork, and L. Stockmeyer. The distributed firing 
squad problem. In Proceedings of the 17th Annual ACM Symposium on Theory 
of Computing (STOC '85), pages 335-345, 1985. 

[11] R. Fagin, J. Y. Halpern, Y. Moses, and M. Y. Vardi. Reasoning About Knowl- 
edge. The MIT Press, Cambridge, MA, USA, 1995. 

[12] M. F. Friedell. On the structure of shared awareness. Behavioral Science, 
14(l):28-39, 1969. 

[13] J. Gray. Notes on data base operating systems. In R. Bayer, R. M. Graham, and 
G. Seegmiiller, editors, Operating Systems, An Advanced Course, volume 60 of 
Lecture Notes in Computer Science, pages 393-481. Springer- Verlag, Berlin, 
Germany / Heidelberg, Germany / New York, NY, USA, 1978. 

[14] J. Halpern and Y. Moses. Knowledge and common knowledge in a distributed 
environment. Journal of the ACM, 37(3):549-587, 1990. 

[15] S. C. Kleene. Introduction to Metamathematics. North-Holland Publishing 
Company, Amsterdam, Netherlands, 1952. 

[16] I. I. Kolodner. On completeness of partially ordered sets and fixpoint theorems 
for isotone mappings. American Mathematical Monthly, 75(l):48-49, 1968. 

[17] L. Lamport. Time, clocks, and the ordering of events in a distributed system. 
Communications of the ACM, 21(7):558-565, 1978. 

[18] L. Lamport. Using time instead of timeout for fault-tolerant distributed sys- 
tems. ACM Transactions on Programming Languages and Systems, 6(2):254- 
280, 1984. 

[19] D. Lewis. Convention, A Philosophical Study. Harvard University Press, Cam- 
bridge, MA, USA, 1969. 

[20] R. Michel. A categorical approach to distributed systems, expressibility and 
knowledge. In Proceedings of the 8th ACM Symposium on Principles of Dis- 
tributed Computing (PODC '89), pages 129-143, 1989. 

[21] E. F. Moore. The firing squad synchronization problem. In E. F. Moore, 
editor, Sequential Machines: Selected Papers, pages 213-214. Addison- Wesley, 
Reading, MA, USA, 1964. 

[22] A. Tarski. A lattice-theoretical fixpoint theorem and its applications. Pacific 
Journal of Mathematics, 5(2):285-309, 1955. 



Appendices 



93 



Appendix A 

A Continuous-Time Model 



In this appendix, we describe a novel continuous-time model for which the results 
in this work hold verbatim. In order to avoid repetitions, we only describe the 
differences between this model and the model presented in Chapter |3j 

A.l Context Parameters 

In the continuous-time model, as in the discrete-time one, we denote a context by 
a tuple 7 = (G-y = (I 7 ,iV 7 ,6 7 ), (Si)i e i 7 , E 7 , (ie)eeE )■ I* 1 this case > though, £ 7 is a 
weighted directed graph with positive, real or infinite, weights. Additionally, we 
define the set of times as T = M>o- Our reasons for this somewhat unorthodox 
approach to modeling time (in a continuous fashion) hopefully become apparent 
throughout Chapter [9j 

A. 2 Timers 

For the duration of this section, fix an agent i G I 7 . As time is continuous in our 
model, we wish to define when i is allowed to act. We say that i is "enabled" (to 
act) at t G T if either t = or t is a supremum of a set of times, at each of which 
i observed an event. (Intuitively, this means that either i observed an event at 
exactly t, or i observed infinitely many events, whose respective times converge to 
t in a monotonically- increasing fashion.) 

In order to allow an agent % G / to make sure it has a chance to act at a certain 
time, we introduce a new type of action, and a new type of event. At any time t 
at which % is enabled, % may set a timer for a future time t' G T s.t. t' > t. Hi 
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sets such a timer, and if % is not enabled at any time between t and t', then a timer 
ring event is observed by i at t', thus enabling it at t'. It should be noted that it is 
also possible, though somewhat less intuitive, to not introduce timers, but rather 
to enable every agent at every time. 

Due to the introduction of timers, the set of all possible states of the environment 
becomes S e = 2 E ^ x 2 MxTxN ^ x 2 l '< (the last element is a subset of the agents, for 
which timers ring at the current time), and the set of possible actions which may be 
taken by i at any time at which it is enabled becomes A4 = Si x 2 Mx ^ eI ^ l ^ eNl ^ x 
{? eT \t' >t} x {false, true}. 

A. 3 Agent States 

In order to define the state of an agent "just before" a time t G T, we assume, for 
each i G I 7 , the existence of a pseudo-limit function linij : S[ 1 ' ' — >■ Si satisfying: 

1. limi(/) = lim<(flf), for every f,g : (-1,0) -»■ S t s.t. /|(- e , ) = g\(-e,o) for some 
e > 0. 

2. linij(/) = s, for a constant function / = s G 

There are a number of other natural properties which one may expect from liim 
(e.g. invariance to composition with monotone continuous functions from (—1, 0) to 
itself, which have as their limit as 0), but we do not require any such properties 
for the results of this work. 

For a full-information protocol, in which the state of each agent % G I 7 at any 
time t G T uniquely determines the full details of every event observed by i up until, 
and including, t, a natural pseudo-limit function is (infinite) union of sets of events. 
In general, functions such as union, logical or, max, and min, are useful building 
blocks for pseudo-limit functions for many intuitive protocols. 

We define full-information protocols in this model in a similar way to Chap- 
ter |3j although in this model an agent only sends out messages in a full- information 
protocol when it is enabled. Two full-information protocols may thus differ not 
only in their response logics, but also in their timer-setting logics. Thus, there does 
not necessarily always exist an isomorphism between the sets of runs of two full- 
information protocols that preserves the set of ND events. Nonetheless, it is still 
true that given a protocol P, there exists a full-information protocol P', s.t. there 
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is a natural monomorphism from R 1 (P) into R^(P'), which preserves both the set 
of ND events, and all responses. 

A. 4 Runs 

We are now ready to redefine the properties that a function r : T — > S e x X ig/ Si 
must satisfy in order to constitute a legal run of a protocol P = ((Si, Pi))i e i G P 7 : 

• Agent state consistency with local protocol: Let i E I and t G T. If t > 0, 
set Si = linij(rj(t + •)). (This is well defined even when t < 1, because linij 
only depends on the values of its argument in a left neighbourhood of 0.) 
Intuitively, Si is the state of i "just before" tfj lit — 0, then may be any of 
the initial states Si. 

If i is not enabled at t (this condition depends only on the environment states 
before and at t), then ri(t) = Si must hold. 

If i is enabled at t, then rj(t) must equal the first part of the output of Pi, 
when evaluated on and on the events observed by i at t. (Once again, the 
other parts thereof determine the actions of i at t.) 

• Environment state properties: 

1. The requirements regarding external inputs and message deliveries are 
unchanged. 

2. Timer events: A timer event for i 6 / occurs at time t € T iff there exists 
t' £ T such that t' < t and such that i set, at t', a timer to ring at t, and 
i was not enabled during (£,£'). 



A. 5 Excluding Degeneracies 

While, in the discrete-time model, a given "partial run" r : {t £ T \ t < 1} — > 
Se x X igJ Si of a protocol P G P 7 may be inductively "rolled forward" to create a full 



(infinite) run (see, e.g. Claim 6.27), this may no longer be the case in a continuous- 
time model with infinitely many agents. Intuitively, consider such a partial run, in 
which infinitely many messages {mk}kLi are sent to some agent i G I 7 before time 1, 



* Note that if ?~i|(t'.i) is constant for some If € T s.t. t' < t, then Si equals this constant value. 
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but are not yet delivered by that time. Assume, furthermore, that for every fcGN, 
the message rrik is guaranteed to be delivered no later than at 1 + \. It is not clear 
how to "roll the run forward", even for a fraction of a time unit. Similarly, if the 
delivery guarantee for each is at 2 + |, then it is not clear that it is possible 



to roll the run forward while avoiding early deliveries, as required in Claim |6.27 
Indeed, if it is not possible to do so, then in any run that is indistinguishable 
from this partial run up to time 1, it is deterministic that some early delivery 
takes place between times 1 and 2, effectively voiding the non-determinism of some 
early deliveries, possibly allowing them to be predicted before they occur. 

In order to avoid degeneracies such as those described above, and thus sufficiently 
maintain the non-deterministic nature of the events that we call "ND events" , we 
axiomatically make the following assumptions regarding the richness of the set of 
runs of any protocol P G P 7 j^] 

• No foresight: For every r G Ry{P) and for every t, d £ T, there exists a run 
r' G i? 7 (P), satisfying: 

1- r'\ m =r\ m . 

2. No external inputs are triggered in r' after t. 

3. Any message delivered early in r' after t is delivered no less than d time 
units after it is sent. 

• No extrasensory perception: For every r G R^(P), for every ( 6 T and for 
every i G I 7 , it holds that PND^(i, t) G RND^(r,t)f\ 

The two above assumptions, regarding non-determinism of future events and 
independence of past events, respectively, imply that agents may not predict the 
occurrence of certain ND events. These assumptions suffice for most of our analysis. 
For some arguments, though, we require some guarantee that agents may not predict 
the absence of ND events. The following assumption, regarding non-determinism 
and independence of present events, provides such a guarantee and, if -R 7 (-P) ^ 0, 
complements the above assumptions in the strongest way possible in some sense. 



* As is discussed in Section 6.2 both of these assumptions may be shown to hold for the 
discrete-time model presented in Chapter [3] Furthermore, if inf(6 7 ) > 0, then an inductive 
argument, rolling a run forward inf(6 7 ) time units at a time, may be used to show that these 
assumptions also hold for protocols implemented using certain "nice" pseudo-limit functions such 
as the union pseu do-l imit function described above, and for arbitrary protocols if |I 7 | < oo. 



See Section 6.2 for the definitions of RND and of PND. (We allow ourselves to state this 



assumption in terms of syncausality, as we only utilize it in our syncausal analysis.) 



A.6. MODELING DISCRETE TIME 99 



• Eternal vigilance: For every run r G _R 7 (P), for every t 6 T, for every set 
E C Ery of external inputs that are not triggered in r before t and for every 
set of M of potential early deliveries at t in r (i.e. messages sent before t, not 
delivered before t, and with a delivery guarantee greater than t), there exists 
a run r' G i? 7 (P), satisfying: 

1- rVt) = r l[o,t)- 
2. r' e (t) = (E,M). 

Although it may be readily verified that the above assumption holds in the discrete- 
time model presented in Chapter [3j this assumption is restrictive for a continuous- 
time model, as e.g. it does not hold for some naturally-occurring models, such as 
models with minimum bounds on delivery times. Moreover, this assumption also 
hinders the possibility of capturing a discrete-time model using our continuous-time 
model. (See the next section for more details.) For these reasons, we replace this 
assumption with the following, weaker assumption, which stems from combining 
the "eternal vigilance" and "no foresight" assumptions when P 7 (P) ^ 0: 

• Stand-alone external inputs: For every external input e G E 7 , there exists a 
run r G R^(P), in which no ND events other than e occur before or at tg. 

A. 6 Modeling Discrete Time 

Now that we finished describing this model, it should be noted that discrete-time 
models, such as the one presented in Chapter [3j may be captured by this model. As 
an example, an integral-time model may be modeled by setting b y (i,j) to integral 
(or infinite) values for every G iV 7 , by forcing the environment to perform ND 
events only at integral times (i.e. removing from P 7 (P) any runs in which any ND 
events occur at non-integral times), and by allowing timers to be set for integral 
times only. (Or, alternatively, by dropping timers altogether, and enabling every 
agent at every integral time.) We consider environment constraints, such as "all ND 
events occur at integral times", or "any message may be delivered, at the earliest, e 
after it was sent", as integral parts of the model (just as the delivery bounds are). 
Care should be taken to make sure that such constraints do not interfere with the 
assumptions of the previous section. 



